diff options
Diffstat (limited to 'jstests/ssl/upgrade_to_ssl.js')
-rw-r--r-- | jstests/ssl/upgrade_to_ssl.js | 24 |
1 files changed, 13 insertions, 11 deletions
diff --git a/jstests/ssl/upgrade_to_ssl.js b/jstests/ssl/upgrade_to_ssl.js index 0c4a2caf222..f1f8409b2a5 100644 --- a/jstests/ssl/upgrade_to_ssl.js +++ b/jstests/ssl/upgrade_to_ssl.js @@ -10,24 +10,26 @@ load("jstests/ssl/libs/ssl_helpers.js"); // "sslAllowInvalidCertificates" is enabled to avoid hostname conflicts with our testing certs -var opts = {sslMode:"allowSSL", - sslPEMKeyFile: SERVER_CERT, - sslAllowInvalidCertificates: "", - sslAllowConnectionsWithoutCertificates: "", - sslCAFile: "jstests/libs/ca.pem"}; -var rst = new ReplSetTest({ name: 'sslSet', nodes: 3, nodeOptions : opts }); +var opts = { + sslMode: "allowSSL", + sslPEMKeyFile: SERVER_CERT, + sslAllowInvalidCertificates: "", + sslAllowConnectionsWithoutCertificates: "", + sslCAFile: "jstests/libs/ca.pem" +}; +var rst = new ReplSetTest({name: 'sslSet', nodes: 3, nodeOptions: opts}); rst.startSet(); rst.initiate(); var rstConn1 = rst.getPrimary(); -rstConn1.getDB("test").a.insert({a:1, str:"TESTTESTTEST"}); +rstConn1.getDB("test").a.insert({a: 1, str: "TESTTESTTEST"}); assert.eq(1, rstConn1.getDB("test").a.count(), "Error interacting with replSet"); print("===== UPGRADE allowSSL -> preferSSL ====="); opts.sslMode = "preferSSL"; rst.upgradeSet(opts); var rstConn2 = rst.getPrimary(); -rstConn2.getDB("test").a.insert({a:2, str:"CHECKCHECK"}); +rstConn2.getDB("test").a.insert({a: 2, str: "CHECKCHECK"}); assert.eq(2, rstConn2.getDB("test").a.count(), "Error interacting with replSet"); // Check that non-ssl connections can still be made @@ -38,10 +40,10 @@ print("===== UPGRADE preferSSL -> requireSSL ====="); opts.sslMode = "requireSSL"; rst.upgradeSet(opts); var rstConn3 = rst.getPrimary(); -rstConn3.getDB("test").a.insert({a:3, str:"GREENEGGSANDHAM"}); +rstConn3.getDB("test").a.insert({a: 3, str: "GREENEGGSANDHAM"}); assert.eq(3, rstConn3.getDB("test").a.count(), "Error interacting with replSet"); // Check that ssl connections can be made -var canConnectSSL = runMongoProgram("mongo", "--port", rst.ports[0], - "--ssl", "--sslAllowInvalidCertificates", "--eval", ";"); +var canConnectSSL = runMongoProgram( + "mongo", "--port", rst.ports[0], "--ssl", "--sslAllowInvalidCertificates", "--eval", ";"); assert.eq(0, canConnectSSL, "SSL Connection attempt failed when it should succeed"); |