1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
// Test forcing certificate validation
// This tests that forcing certification validation will prohibit clients without certificates
// from connecting.
// Test that connecting with no client certificate and --sslAllowConnectionsWithoutCertificates
// (an alias for sslWeakCertificateValidation) connects successfully.
var md = MongoRunner.runMongod({
sslMode: "requireSSL",
sslPEMKeyFile: "jstests/libs/server.pem",
sslCAFile: "jstests/libs/ca.pem",
sslAllowConnectionsWithoutCertificates: ""
});
var mongo = runMongoProgram(
"mongo", "--port", md.port, "--ssl", "--sslAllowInvalidCertificates", "--eval", ";");
// 0 is the exit code for success
assert(mongo == 0);
// Test that connecting with a valid client certificate connects successfully.
mongo = runMongoProgram("mongo",
"--port",
md.port,
"--ssl",
"--sslAllowInvalidCertificates",
"--sslPEMKeyFile",
"jstests/libs/client.pem",
"--eval",
";");
// 0 is the exit code for success
assert(mongo == 0);
MongoRunner.stopMongod(md);
// Test that connecting with no client certificate and no --sslAllowConnectionsWithoutCertificates
// fails to connect.
var md2 = MongoRunner.runMongod({
sslMode: "requireSSL",
sslPEMKeyFile: "jstests/libs/server.pem",
sslCAFile: "jstests/libs/ca.pem"
});
mongo = runMongoProgram(
"mongo", "--port", md2.port, "--ssl", "--sslAllowInvalidCertificates", "--eval", ";");
// 1 is the exit code for failure
assert(mongo == 1);
MongoRunner.stopMongod(md2);
|
