jstests/sslSpecial/set_parameter_nossl.js


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

// Test changing the --sslMode and --clusterAuthMode
// parameters using setParameter

// setParameter should always fail since it
// cannot be used to transition from disabled/keyFile modes
function testTransition(newSSLMode, newClusterAuthMode) {
    // If no parameters are given sslMode defaults to disabled
    var conn = MongoRunner.runMongod({clusterAuthMode: "keyFile"});
    var adminDB = conn.getDB("admin");
    var res = adminDB.runCommand({"setParameter": 1, "sslMode": newSSLMode});
    assert(!res["ok"]);

    var res = adminDB.runCommand({"setParameter": 1, "clusterAuthMode": newClusterAuthMode});
    assert(!res["ok"]);
    MongoRunner.stopMongod(conn.port);
}

testTransition("allowSSL", "sendKeyFile");
testTransition("preferSSL", "sendX509");
testTransition("requireSSL", "x509");