diff options
Diffstat (limited to 'jstests/ssl_linear/ssl_cert_selector.js')
| -rw-r--r-- | jstests/ssl_linear/ssl_cert_selector.js | 71 |
1 files changed, 0 insertions, 71 deletions
diff --git a/jstests/ssl_linear/ssl_cert_selector.js b/jstests/ssl_linear/ssl_cert_selector.js deleted file mode 100644 index d52e5d1d5fb..00000000000 --- a/jstests/ssl_linear/ssl_cert_selector.js +++ /dev/null @@ -1,71 +0,0 @@ -/** - * Validate that the shell can load certificates from the certificate store and connect to the - * server. - */ - -load('jstests/libs/python.js'); -load('jstests/ssl/libs/ssl_helpers.js'); - -requireSSLProvider('windows', function() { - 'use strict'; - - if (_isWindows()) { - assert.eq(0, - runProgram(getPython3Binary(), "jstests/ssl_linear/windows_castore_cleanup.py")); - - // SChannel backed follows Windows rules and only trusts Root in LocalMachine - runProgram("certutil.exe", "-addstore", "-f", "Root", "jstests\\libs\\ca.pem"); - // Import a pfx file since it contains both a cert and private key and is easy to import - // via command line. - runProgram("certutil.exe", - "-importpfx", - "-f", - "-p", - "qwerty", - "jstests\\libs\\trusted-client.pfx"); - } - - try { - const conn = MongoRunner.runMongod({ - sslMode: 'requireSSL', - sslPEMKeyFile: "jstests\\libs\\trusted-server.pem", - setParameter: {tlsUseSystemCA: true}, - }); - - const testWithCert = function(certSelector) { - jsTest.log(`Testing with SSL cert ${certSelector}`); - const argv = [ - 'mongo', - '--ssl', - '--sslCertificateSelector', - certSelector, - '--port', - conn.port, - '--eval', - 'db.runCommand({buildInfo: 1})' - ]; - - const exitStatus = runMongoProgram.apply(null, argv); - assert.eq(exitStatus, 0, "successfully connected with SSL"); - }; - - const trusted_client_thumbprint = cat('jstests/libs/trusted-client.pem.digest.sha1'); - - assert.doesNotThrow(function() { - testWithCert("thumbprint=" + trusted_client_thumbprint); - }); - - assert.doesNotThrow(function() { - testWithCert("subject=Trusted Kernel Test Client"); - }); - - MongoRunner.stopMongod(conn); - } finally { - if (_isWindows()) { - const trusted_ca_thumbprint = cat('jstests/libs/trusted-ca.pem.digest.sha1'); - runProgram("certutil.exe", "-delstore", "-f", "Root", trusted_ca_thumbprint); - const ca_thumbprint = cat('jstests/libs/ca.pem.digest.sha1'); - runProgram("certutil.exe", "-delstore", "-f", "Root", ca_thumbprint); - } - } -}); |
