diff options
| author | Amalia Hawkins <amalia.hawkins@10gen.com> | 2014-09-22 15:48:47 -0400 |
|---|---|---|
| committer | Amalia Hawkins <amalia.hawkins@10gen.com> | 2014-09-22 15:49:27 -0400 |
| commit | 2a37d7e5df2e31023e86f4f1ef3b9e9e3d6285fe (patch) | |
| tree | 24a577f1dc775906c0b2e18360da8a2eacc7fce6 /jstests/ssl/ssl_hostname_validation.js | |
| parent | 61c7055f1f0a01957b54429211e177545a062bc7 (diff) | |
| download | mongo-2a37d7e5df2e31023e86f4f1ef3b9e9e3d6285fe.tar.gz | |
Revert commits 01c372d and 8954a16 -- accidental commit.
Diffstat (limited to 'jstests/ssl/ssl_hostname_validation.js')
| -rw-r--r-- | jstests/ssl/ssl_hostname_validation.js | 13 |
1 files changed, 1 insertions, 12 deletions
diff --git a/jstests/ssl/ssl_hostname_validation.js b/jstests/ssl/ssl_hostname_validation.js index b7a30e0f76b..f7e16a752a0 100644 --- a/jstests/ssl/ssl_hostname_validation.js +++ b/jstests/ssl/ssl_hostname_validation.js @@ -5,7 +5,6 @@ var SERVER_CERT = "jstests/libs/server.pem"; var CN_CERT = "jstests/libs/localhostnameCN.pem"; var SAN_CERT = "jstests/libs/localhostnameSAN.pem"; var CLIENT_CERT = "jstests/libs/client.pem" -var BAD_SAN_CERT = "jstests/libs/badSAN.pem"; // We want to be able to control all SSL parameters // but still need an SSL shell hence the test is placed @@ -66,6 +65,7 @@ testCombination(SERVER_CERT, false, true, true); testCombination(SERVER_CERT, true, false, true); testCombination(SERVER_CERT, true, true, true); + // 2. Initiate ReplSetTest with invalid certs ssl_options = {sslMode : "requireSSL", // SERVER_CERT has SAN=localhost. CLIENT_CERT is exact same except no SANS @@ -99,14 +99,3 @@ var replTest = new ReplSetTest({nodes : {node0 : ssl_options, node1 : ssl_option replTest.startSet(); replTest.initiate(); replTest.stopSet(); - -// 5. Initiate ReplSetTest with a cert that has an invalid -// SAN (badSAN) but a correct CN (localhost). -ssl_options = {sslMode : "requireSSL", - sslPEMKeyFile: BAD_SAN_CERT, - sslCAFile: CA_CERT}; -replTest = new ReplSetTest({nodes : {node0 : ssl_options, node1 : ssl_options}}); -replTest.startSet(); -assert.throws( function() { replTest.initiate() } ); -replTest.stopSet(); - |