summaryrefslogtreecommitdiff
path: root/jstests/ssl_x509/x509_basic.js
diff options
context:
space:
mode:
Diffstat (limited to 'jstests/ssl_x509/x509_basic.js')
-rw-r--r--jstests/ssl_x509/x509_basic.js47
1 files changed, 0 insertions, 47 deletions
diff --git a/jstests/ssl_x509/x509_basic.js b/jstests/ssl_x509/x509_basic.js
deleted file mode 100644
index 7dad98e824f..00000000000
--- a/jstests/ssl_x509/x509_basic.js
+++ /dev/null
@@ -1,47 +0,0 @@
-// Check that if a hello command for intracluster auth contains both the saslSupportedMechs field
-// for the __system user and a speculativeAuthenticate field for X509, we do not see a log marking
-// the changing of the username from __system to that specified in the x509 certificate.
-(function() {
-'use strict';
-
-load("jstests/libs/log.js"); // For findMatchingLogLine.
-
-const x509_options = {
- sslMode: "requireSSL",
- sslPEMKeyFile: "jstests/libs/server.pem",
- sslCAFile: "jstests/libs/ca.pem",
- sslClusterFile: "jstests/libs/cluster_cert.pem",
- sslAllowInvalidHostnames: "",
- clusterAuthMode: "x509"
-};
-const CLIENT_USER = "CN=client,OU=KernelUser,O=MongoDB,L=New York City,ST=New York,C=US";
-
-function runTest() {
- const mongo = MongoRunner.runMongod(Object.merge(x509_options, {auth: ""}));
-
- const ext = mongo.getDB("$external");
- ext.createUser({user: CLIENT_USER, roles: []});
-
- assert.commandWorked(ext.runCommand({
- hello: 1,
- saslSupportedMechs: "local.__system",
- speculativeAuthenticate: {authenticate: "1", mechanism: "MONGODB-X509", db: "$external"}
- }));
-
- const profileLevelDB = mongo.getDB("x509_basic");
- const globalLog = assert.commandWorked(profileLevelDB.adminCommand({getLog: 'global'}));
- const fieldMatcher = {msg: "Different user name was supplied to saslSupportedMechs"};
- assert.eq(
- null,
- findMatchingLogLine(globalLog.log, fieldMatcher),
- "Found log line concerning \"Different user name was supplied to saslSupportedMechs\" when we did not expect to.");
- MongoRunner.stopMongod(mongo);
-}
-
-// Since the logic around this log has special-casing around enableTestCommands, assert that the log
-// is absent both when in test-mode and normal mode.
-TestData.enableTestCommands = true;
-runTest();
-TestData.enableTestCommands = false;
-runTest();
-})();