SERVER-11703 Tests for setParameter for sslMode/clusterAuthMode

1 files changed, 26 insertions, 0 deletions

diff --git a/jstests/sslSpecial/set_parameter_nossl.js b/jstests/sslSpecial/set_parameter_nossl.js
new file mode 100644
index 00000000000..825ce05fd8e
--- /dev/null
+++ b/jstests/sslSpecial/set_parameter_nossl.js
@@ -0,0 +1,26 @@
+// Test changing the --sslMode and --clusterAuthMode 
+// parameters using setParameter
+
+port = allocatePorts(1)[0];
+
+// setParameter should always fail since it
+// cannot be used to transition from disabled/keyFile modes
+function testTransition(newSSLMode, newClusterAuthMode) {
+    // If no parameters are given sslMode defaults to disabled
+    var conn = MongoRunner.runMongod({port: port,
+                                      clusterAuthMode: "keyFile"})
+    var adminDB = conn.getDB("admin"); 
+    var res = adminDB.runCommand({ "setParameter" : 1,
+                                   "sslMode" : newSSLMode });
+    assert(!res["ok"]);
+
+    var res = adminDB.runCommand({ "setParameter" : 1,
+                                   "clusterAuthMode" : newClusterAuthMode });
+    assert(!res["ok"]);
+    stopMongod(port);
+}
+
+testTransition("allowSSL", "sendKeyFile");
+testTransition("preferSSL", "sendX509");
+testTransition("requireSSL", "x509");
+