summaryrefslogtreecommitdiff
path: root/jstests/ssl/libs/ssl_helpers.js
blob: faf5b777284b26ef348e2ddd389b9dc3f9cbfbf2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
//=== Shared SSL testing library functions and constants ===

var KEYFILE = "jstests/libs/key1"
var SERVER_CERT = "jstests/libs/server.pem"
var CA_CERT = "jstests/libs/ca.pem"
var CLIENT_CERT = "jstests/libs/client.pem"

// Note: "sslAllowInvalidCertificates" is enabled to avoid
// hostname conflicts with our testing certificates
disabled = {sslMode: "disabled"};
allowSSL = {sslMode : "allowSSL",
    sslAllowInvalidCertificates: "",
    sslPEMKeyFile : SERVER_CERT,
    sslCAFile: CA_CERT};
preferSSL = {sslMode : "preferSSL",
    sslAllowInvalidCertificates: "",
    sslPEMKeyFile :  SERVER_CERT,
    sslCAFile: CA_CERT};
requireSSL = {sslMode : "requireSSL",
    sslAllowInvalidCertificates: "",
    sslPEMKeyFile : SERVER_CERT,
    sslCAFile: CA_CERT};

// Test if ssl replset  configs work
var replShouldSucceed = function(opt1, opt2) {
    ssl_options1 = opt1;
    ssl_options2 = opt2;
    // try running this file using the given config
    load("jstests/replsets/replset1.js");
}

// Test if ssl replset configs fail
var replShouldFail = function(opt1, opt2) {
    ssl_options1 = opt1;
    ssl_options2 = opt2;
    replTest = null;
    assert.throws(load,["jstests/replsets/replset1.js"],
                  "This setup should have failed");
    // clean up to continue running...
    if (replTest) {
        replTest.stopSet(15);
    }
}

/**
 * Takes in two mongod/mongos configuration options and runs a basic
 * sharding test to see if they can work together...
 */
function mixedShardTest(options1, options2, shouldSucceed) {
    try {
        var st = new ShardingTest({
            mongos : [options1],
            config : [options1],
            shards : [options1, options2]
        });
        st.stopBalancer();

        // Test mongos talking to config servers
        var r = st.adminCommand({enableSharding: "test"});
        assert.eq(r, true, "error enabling sharding for this configuration");

        r = st.adminCommand({ movePrimary: 'test', to: 'shard0001' });

        db1 = st.getDB("test");
        r = st.adminCommand({ shardCollection : "test.col" , key : { _id : 1 } });
        assert.eq(r, true, "error sharding collection for this configuration");

	// Test mongos talking to shards
        var bigstr = Array(1024*1024).join("#");

        for(var i = 0; i < 128; i++){
            db1.col.insert({_id:i, string:bigstr});
        }
        db1.getLastError();
        assert.eq(128, db1.col.count(), "error retrieving documents from cluster");

        // Test shards talking to each other
        r = st.getDB('test').adminCommand({ moveChunk: 'test.col',
                                            find: { _id: 0 }, to: 'shard0000' });
        assert(r.ok, "error moving chunks: " + tojson(r));

        db1.col.remove({});

    } catch(e) {
        if (shouldSucceed) throw e;
        //silence error if we should fail...
        print("IMPORTANT! => Test failed when it should have failed...continuing...");
    } finally {
        // This has to be done in order for failure
        // to not prevent future tests from running...
        if(st) {
            st.stop();
        }
    }
}

//
// Utility functions for upgrading replica sets
//
// Hacked from version upgrading functions in multiVersion folder.
// TODO: merge this with that file and add to utils?
//

ReplSetTest.prototype.upgradeSet = function( options ){
    options = options || {}

    var nodes = this.nodes
    var primary = this.getPrimary()

    // Upgrade secondaries first
    var nodesToUpgrade = this.getSecondaries()

    // Then upgrade primaries
    nodesToUpgrade.push( primary )

    // We can upgrade with no primary downtime if we have enough nodes
    var noDowntimePossible = nodes.length > 2

    for( var i = 0; i < nodesToUpgrade.length; i++ ){
        var node = nodesToUpgrade[ i ]
        if( node == primary ){
            node = this.stepdown( node )
            primary = this.getPrimary()
        }

        var prevPrimaryId = this.getNodeId( primary );
        //merge new options into node settings...
        for(var nodeName in this.nodeOptions){
            this.nodeOptions[nodeName] = Object.merge(this.nodeOptions[nodeName], options);
        }
        printjson(this.nodeOptions);
        this.upgradeNode( node, options, true )

        if( noDowntimePossible )
            assert.eq( this.getNodeId( primary ), prevPrimaryId )
    }
}

ReplSetTest.prototype.upgradeNode = function( node, opts, waitForState ){
    var node = this.restart( node, opts )
    // By default, wait for primary or secondary state
    if( waitForState == undefined ) waitForState = true
    if( waitForState == true ) waitForState = [ ReplSetTest.State.PRIMARY,
                                                ReplSetTest.State.SECONDARY,
                                                ReplSetTest.State.ARBITER ]
    if( waitForState )
        this.waitForState( node, waitForState )

    return node
}

ReplSetTest.prototype.stepdown = function( nodeId ){
    nodeId = this.getNodeId( nodeId )
    assert.eq( this.getNodeId( this.getPrimary() ), nodeId )
    var node = this.nodes[ nodeId ]
    try {
        node.getDB("admin").runCommand({ replSetStepDown: 50, force : true })
        assert( false )
    }
    catch( e ){
        printjson( e );
    }
    return this.reconnect( node )
}

ReplSetTest.prototype.reconnect = function( node ){
    var nodeId = this.getNodeId( node )
    this.nodes[ nodeId ] = new Mongo( node.host )
    var except = {}
    for( var i in node ){
        if( typeof( node[i] ) == "function" ) continue
        this.nodes[ nodeId ][ i ] = node[ i ]
    }
    return this.nodes[ nodeId ]
}