Commit Graph

104 Commits

Author SHA1 Message Date
Kaloian Manassiev
10e15baec4 SERVER-25383 Make sharding_with_x509.js use count with predicate 2016-08-02 09:56:32 -04:00
Kaloian Manassiev
b6abb408c1 SERVER-24603 Re-enable auth tests in 'sharding_last_stable_mongos'
This change makes auth tests with 3.2 mongos, which need to control the
balancer state to go through a special control mongos instance running
version 3.4.

This reverts commit bfde0ecb1c.
2016-06-20 22:15:57 -04:00
Max Hirschhorn
01dfe61a6c SERVER-23741 Use MongoRunner.runMongoTool() to run tools from JS tests.
Changes all usages of runMongoProgram(<mongo tool>, ...) to
MongoRunner.runMongoTool(<mongo tool>, {...}) to take advantage of the
--dialTimeout command line option supported by the mongo tools.

Adds support for specifying positional arguments to
MongoRunner.runMongoTool() in order to support all invocations of the
bsondump and mongofiles tools.
2016-06-07 16:01:44 -04:00
Spencer Jackson
4c79077a39 SERVER-24369: Accept OpenSSL FIPS error message from Ubuntu 16.04 2016-06-02 12:55:03 -04:00
Mark Benvenuto
6dcdd23dd3 SERVER-23971 Clang-Format code 2016-05-28 17:55:12 -04:00
Shane Harvey
aa9fc690ce SERVER-6823 Enable simultaneous ssl/x509 auth upgrade with only two restarts
Reduce the required number of restarts from three to two by allowing sslMode
allowSSL to be used in combination with transitionToAuth and clusterAuthMode
x509.
2016-05-19 14:59:21 -04:00
Jonathan Reams
32d272af6b SERVER-24062 Pull CA certificates from correct source on OSX 2016-05-06 17:15:24 -04:00
Shane Harvey
8432d0bb48 SERVER-6823 Rename --tryClusterAuth to --transitionToAuth 2016-04-18 14:11:13 -04:00
Jonathan Reams
b788596cb6 SERVER-23044 Add system CA keychain support for OSX 2016-04-15 13:49:58 -04:00
Shane Harvey
6e18b2fb45 SERVER-6823 Rolling access control upgrade tests require persistence 2016-04-14 17:48:11 -04:00
Shane Harvey
26b55942cc SERVER-6823 Enable Access control without downtime.
Add --tryClusterAuth flag that enables communicatation between nodes running
with and without auth.
2016-04-13 14:19:55 -04:00
Jonathan Reams
6fa3f3c8b5 SERVER-23044 Fall back to system CA certs if CA file isn't provided 2016-04-04 14:40:14 -04:00
Jonathan Reams
af651b2a97 Revert "SERVER-23044 Fall back to system CA certs if CA file isn't provided"
This reverts commit 22e4df34c0.
2016-04-04 13:34:32 -04:00
Jonathan Reams
22e4df34c0 SERVER-23044 Fall back to system CA certs if CA file isn't provided 2016-04-04 13:29:14 -04:00
Jonathan Abrahams
4ae691e8ed SERVER-22468 Format JS code with approved style in jstests/ 2016-03-09 12:18:14 -05:00
Mike Grundy
56aa683f83 SERVER-22341 fix jslint errors in jstests/ssl with eslint --fix 2016-02-05 15:00:52 -05:00
Mark Benvenuto
fca7d64ae4 SERVER-22090 ssl_cert_password.js must be disabled on ppc64 2016-01-13 14:24:13 -05:00
Charlie Swanson
8c67bb9322 SERVER-21384 Enable all suites on ephemeral storage engines 2015-12-09 12:20:02 -05:00
Kaloian Manassiev
3ed6635a5f SERVER-21050 Cleanup ReplSetTest
This is just a cleanup work to hide some of the private state of
ReplSetTest so it is easier to encapsulate and add new logic. Also enables
strict mode.
2015-12-08 13:05:00 -05:00
Spencer Jackson
5ed5b15d68 SERVER-15459: Check new x509 names against _clusterIdMatch 2015-10-01 10:35:48 -04:00
Charlie Swanson
76ac5fc4ef SERVER-18272 Fix ssl_fips.js 2015-09-10 09:47:58 -04:00
Charlie Swanson
c15f4bb96d SERVER-18272 Update jstests to use allocatePort() instead of hard coding ports 2015-09-09 13:14:48 -04:00
Adam Midvidy
2186037a81 SERVER-19113 rewrite ssl_crl.js and ssl_mixedmode.js to not depend on legacy DBClientConnection behavior 2015-06-30 16:50:38 -04:00
Jonathan Reams
170a926471 SERVER-18371 Fix FIPS test for platforms without FIPS support 2015-06-05 10:20:02 -04:00
Amalia Hawkins
3fe79932f7 SERVER-18140: Allow getParameter to be executed locally against an arbiter in an authenticated replica set 2015-04-28 16:41:22 -04:00
Spencer T Brody
8b75280296 SERVER-17971 Make ShardingTest start single-server config servers as replica sets 2015-04-23 14:30:19 -04:00
Andreas Nilsson
9958e1ec89 SERVER-18051 Fix OpenSSL FIPS error when using SCRAM-SHA1 2015-04-16 11:28:18 -04:00
Spencer T Brody
7baac52f05 SERVER-17450 Cleanup SSL test infrastructure 2015-04-06 18:19:21 -04:00
Charlie
6d33c3637e Revert "SERVER-17450 Cleanup SSL test infrastructure"
This reverts commit 43e53251a3.
2015-03-24 13:46:51 -04:00
Spencer T Brody
43e53251a3 SERVER-17450 Cleanup SSL test infrastructure 2015-03-24 16:13:30 +01:00
Randolph Tan
77562fbd1b SERVER-17348 Consolidate ReplSetTest.upgradeSet
Also removed zero_vote_aribter multiVersion tests.
2015-03-13 13:31:52 -04:00
Eric Milkie
da1c93cc9f SERVER-16901 use a real state transition to detect when nodes restart 2015-01-20 14:08:32 -05:00
Eric Milkie
2fe551d871 SERVER-16371 fix ssl tests to not share replica set monitors between sub-runs 2014-12-01 17:33:02 -05:00
Eric Milkie
3967899bf5 SERVER-16371 clean up unit tests 2014-12-01 17:33:01 -05:00
Ernie Hershey
0bb84c4860 SERVER-11005 Re-enable FIPS test 2014-11-05 16:26:05 -05:00
Andreas Nilsson
666d7d2af4 SERVER-7596 Make authSchemaVersion 28Final if no user docs 2014-11-04 12:39:01 -05:00
Luke Lovett
159c1ed111 SERVER-14709 Add ssl_without_ca.js to test the behavior of the server without a CA file.
Closes #857

Signed-off-by: Benety Goh <benety@mongodb.com>
2014-11-04 11:03:38 -05:00
Eric Milkie
a91d9aa82a SERVER-15535 remove unneeded sethbmsg feature from ReplSetTest 2014-10-10 09:11:42 -04:00
Spencer T Brody
4d0e951ae7 SERVER-15437 wait for replication of users in failing SSL tests 2014-09-29 12:46:48 -04:00
Eric Milkie
070596dd59 SERVER-15437 wait for replication before proceeding 2014-09-29 10:44:02 -04:00
Amalia Hawkins
128ef4c4bc SERVER-14713 fix false positives for ssl tests 2014-09-26 11:21:53 -04:00
Amalia Hawkins
3a5ea7b224 SERVER-14713: User must specify either sslAllowInvalidCertificates or sslCAFile when starting mongo shell in SSL mode. 2014-09-25 11:27:14 -04:00
Amalia Hawkins
5d580ba313 SERVER-14861: Ensure that SSL hostname matching strictly follows RFC 2818 2014-09-24 13:01:11 -04:00
Amalia Hawkins
2a37d7e5df Revert commits 01c372d and 8954a16 -- accidental commit. 2014-09-22 15:49:27 -04:00
Amalia Hawkins
01c372ddd6 test attempt 2014-09-22 15:40:18 -04:00
Amalia Hawkins
4c429ebe0a SERVER-14977: add new alias for sslWeakCertificateValidation option 2014-09-11 16:02:49 -04:00
melissaosullivan
1b1842be9b SERVER-11107 Server SSL certificate expiration date check tests
Closes #734

Signed-off-by: Benety Goh <benety@mongodb.com>
2014-08-08 05:56:35 -04:00
Stuart Larsen
03048e3ab4 SERVER-14516 Brand new testing certificates
New testing certificates generated for MongoDB using x509gen. Test were also updated slightly to accommodate for new subject alternative names and such.

All instances of "sslAllowInvalidCertificates" were removed from src/mongo/shell.

Closes #724

Signed-off-by: Benety Goh <benety@mongodb.com>
2014-07-26 13:22:04 -04:00
Spencer Jackson
138d78bd6d SERVER-14518: Allow disabling hostname validation for SSL 2014-07-22 13:23:24 -04:00
Shaun Verch
71d75ac486 SERVER-12748 Tests for invalid transitions of clusterAuthMode without outgoing SSL 2014-06-10 11:50:06 -04:00