From c6dd21f04e9f14b0c1e5c064e87b3266ff02f60f Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Wed, 22 Mar 2023 17:27:57 -0400
Subject: [PATCH] Remove caSigningCert from list of certs to renew

This certificate should not be renewed this way.
ipa-cacert-manage renew should be used.

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
---
 ipatests/test_integration/test_hsm.py | 1 -
 1 file changed, 1 deletion(-)

diff --git a/ipatests/test_integration/test_hsm.py b/ipatests/test_integration/test_hsm.py
index a12dacf1c1c..f4fcef867dd 100644
--- a/ipatests/test_integration/test_hsm.py
+++ b/ipatests/test_integration/test_hsm.py
@@ -387,7 +387,6 @@ def test_certs_renewal(self):
         """
         check_version(self.master)
         CA_TRACKING_REQS = {
-            'caSigningCert cert-pki-ca': 'cacaSigningCert',
             'ocspSigningCert cert-pki-ca': 'caocspSigningCert',
             'subsystemCert cert-pki-ca': 'casubsystemCert',
             'auditSigningCert cert-pki-ca': 'caauditSigningCert'