2013-10-10 10:32:49 -04:00
|
|
|
// Test mongod start with FIPS mode enabled
|
2015-09-10 09:32:51 -04:00
|
|
|
var port = allocatePort();
|
|
|
|
|
var md = MongoRunner.runMongod({port: port,
|
|
|
|
|
sslMode: "requireSSL",
|
2015-03-22 12:08:42 -04:00
|
|
|
sslPEMKeyFile: "jstests/libs/server.pem",
|
|
|
|
|
sslCAFile: "jstests/libs/ca.pem",
|
|
|
|
|
sslFIPSMode: ""});
|
2013-10-10 10:32:49 -04:00
|
|
|
|
2015-03-22 12:08:42 -04:00
|
|
|
var mongo = runMongoProgram("mongo",
|
2015-09-10 09:32:51 -04:00
|
|
|
"--port", port,
|
2015-03-22 12:08:42 -04:00
|
|
|
"--ssl",
|
|
|
|
|
"--sslAllowInvalidCertificates",
|
2013-10-10 10:32:49 -04:00
|
|
|
"--sslPEMKeyFile", "jstests/libs/client.pem",
|
|
|
|
|
"--sslFIPSMode",
|
|
|
|
|
"--eval", ";");
|
|
|
|
|
|
2013-10-24 14:47:48 -04:00
|
|
|
// if mongo shell didn't start/connect properly
|
|
|
|
|
if (mongo != 0) {
|
|
|
|
|
print("mongod failed to start, checking for FIPS support");
|
2015-06-04 17:15:52 -04:00
|
|
|
mongoOutput = rawMongoProgramOutput()
|
|
|
|
|
assert(mongoOutput.match(/this version of mongodb was not compiled with FIPS support/) ||
|
|
|
|
|
mongoOutput.match(/FIPS_mode_set:fips mode not supported/))
|
2013-10-24 14:47:48 -04:00
|
|
|
}
|
|
|
|
|
else {
|
2015-04-16 11:27:13 -04:00
|
|
|
// verify that auth works, SERVER-18051
|
|
|
|
|
md.getDB("admin").createUser({user: "root", pwd: "root", roles: ["root"]});
|
|
|
|
|
assert(md.getDB("admin").auth("root", "root"), "auth failed");
|
|
|
|
|
|
2013-10-24 14:47:48 -04:00
|
|
|
// kill mongod
|
2015-03-22 12:08:42 -04:00
|
|
|
MongoRunner.stopMongod(md);
|
2013-10-11 10:49:17 -04:00
|
|
|
}
|