diff options
Diffstat (limited to 'jstests/ssl/ssl_restricted_protocols.js')
-rw-r--r-- | jstests/ssl/ssl_restricted_protocols.js | 66 |
1 files changed, 31 insertions, 35 deletions
diff --git a/jstests/ssl/ssl_restricted_protocols.js b/jstests/ssl/ssl_restricted_protocols.js index f09c90c4535..1ea7c0dd209 100644 --- a/jstests/ssl/ssl_restricted_protocols.js +++ b/jstests/ssl/ssl_restricted_protocols.js @@ -2,39 +2,35 @@ // protocols. (function() { - 'use strict'; - - var SERVER_CERT = "jstests/libs/server.pem"; - var CLIENT_CERT = "jstests/libs/client.pem"; - var CA_CERT = "jstests/libs/ca.pem"; - - function runTestWithoutSubset(subset) { - const disabledProtocols = subset.join(","); - const conn = MongoRunner.runMongod({ - sslMode: 'allowSSL', - sslPEMKeyFile: SERVER_CERT, - sslDisabledProtocols: disabledProtocols - }); - - const exitStatus = runMongoProgram('mongo', - '--ssl', - '--sslAllowInvalidHostnames', - '--sslPEMKeyFile', - CLIENT_CERT, - '--sslCAFile', - CA_CERT, - '--port', - conn.port, - '--eval', - 'quit()'); - - assert.eq(0, exitStatus, ""); - - MongoRunner.stopMongod(conn); - } - - runTestWithoutSubset(["TLS1_0"]); - runTestWithoutSubset(["TLS1_2"]); - runTestWithoutSubset(["TLS1_0", "TLS1_1"]); - +'use strict'; + +var SERVER_CERT = "jstests/libs/server.pem"; +var CLIENT_CERT = "jstests/libs/client.pem"; +var CA_CERT = "jstests/libs/ca.pem"; + +function runTestWithoutSubset(subset) { + const disabledProtocols = subset.join(","); + const conn = MongoRunner.runMongod( + {sslMode: 'allowSSL', sslPEMKeyFile: SERVER_CERT, sslDisabledProtocols: disabledProtocols}); + + const exitStatus = runMongoProgram('mongo', + '--ssl', + '--sslAllowInvalidHostnames', + '--sslPEMKeyFile', + CLIENT_CERT, + '--sslCAFile', + CA_CERT, + '--port', + conn.port, + '--eval', + 'quit()'); + + assert.eq(0, exitStatus, ""); + + MongoRunner.stopMongod(conn); +} + +runTestWithoutSubset(["TLS1_0"]); +runTestWithoutSubset(["TLS1_2"]); +runTestWithoutSubset(["TLS1_0", "TLS1_1"]); })(); |