diff options
Diffstat (limited to 'jstests/ssl/ssl_intermediate_ca.js')
-rw-r--r-- | jstests/ssl/ssl_intermediate_ca.js | 52 |
1 files changed, 26 insertions, 26 deletions
diff --git a/jstests/ssl/ssl_intermediate_ca.js b/jstests/ssl/ssl_intermediate_ca.js index 838f43bcb30..887127d6a73 100644 --- a/jstests/ssl/ssl_intermediate_ca.js +++ b/jstests/ssl/ssl_intermediate_ca.js @@ -2,36 +2,36 @@ // in the certificate key file will be sent to the remote. (function() { - 'use strict'; +'use strict'; - load('jstests/ssl/libs/ssl_helpers.js'); +load('jstests/ssl/libs/ssl_helpers.js'); - if (determineSSLProvider() === 'windows') { - // FIXME: SERVER-39574 - print("Skipping test with windows SChannel pending SERVER-39574"); - return; - } +if (determineSSLProvider() === 'windows') { + // FIXME: SERVER-39574 + print("Skipping test with windows SChannel pending SERVER-39574"); + return; +} - // server-intermediate-ca was signed by ca.pem, not trusted-ca.pem - const VALID_CA = 'jstests/libs/ca.pem'; - const INVALID_CA = 'jstests/libs/trusted-ca.pem'; +// server-intermediate-ca was signed by ca.pem, not trusted-ca.pem +const VALID_CA = 'jstests/libs/ca.pem'; +const INVALID_CA = 'jstests/libs/trusted-ca.pem'; - function runTest(inbound, outbound) { - const mongod = MongoRunner.runMongod({ - sslMode: 'requireSSL', - sslAllowConnectionsWithoutCertificates: '', - sslPEMKeyFile: 'jstests/libs/server-intermediate-ca.pem', - sslCAFile: outbound, - sslClusterCAFile: inbound, - }); - assert(mongod); - assert.eq(mongod.getDB('admin').system.users.find({}).toArray(), []); - MongoRunner.stopMongod(mongod); - } +function runTest(inbound, outbound) { + const mongod = MongoRunner.runMongod({ + sslMode: 'requireSSL', + sslAllowConnectionsWithoutCertificates: '', + sslPEMKeyFile: 'jstests/libs/server-intermediate-ca.pem', + sslCAFile: outbound, + sslClusterCAFile: inbound, + }); + assert(mongod); + assert.eq(mongod.getDB('admin').system.users.find({}).toArray(), []); + MongoRunner.stopMongod(mongod); +} - // Normal mode, we have a valid CA being presented for outbound and inbound. - runTest(VALID_CA, VALID_CA); +// Normal mode, we have a valid CA being presented for outbound and inbound. +runTest(VALID_CA, VALID_CA); - // Alternate CA mode, only the inbound CA is valid. - runTest(VALID_CA, INVALID_CA); +// Alternate CA mode, only the inbound CA is valid. +runTest(VALID_CA, INVALID_CA); })(); |