1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
// Ensure that all 'ssl' options are canonicalized to their modern 'tls' versions.
(function() {
'use strict';
function runTest(mongod) {
assert(mongod);
const admin = mongod.getDB('admin');
const opts = assert.commandWorked(admin.runCommand({getCmdLineOpts: 1}));
print(tojson(opts));
assert.eq(typeof (opts), 'object');
assert.eq(typeof (opts.parsed), 'object');
assert.eq(typeof (opts.parsed.net), 'object');
const net = opts.parsed.net;
assert.eq(typeof (net.ssl), 'undefined');
assert.eq(typeof (net.tls), 'object');
const tls = net.tls;
assert.eq(tls.mode, 'requireTLS');
assert.eq(tls.CAFile, 'jstests/libs/ca.pem');
assert.eq(tls.certificateKeyFile, 'jstests/libs/server.pem');
assert.eq(tls.allowConnectionsWithoutCertificates, true);
assert.eq(tls.allowInvalidHostnames, true);
}
const options = {
sslMode: 'requireSSL',
sslCAFile: 'jstests/libs/ca.pem',
sslPEMKeyFile: 'jstests/libs/server.pem',
sslAllowConnectionsWithoutCertificates: '',
sslAllowInvalidHostnames: '',
};
const mongod = MongoRunner.runMongod(options);
runTest(mongod);
MongoRunner.stopMongod(mongod);
})();
|
