mirror of https://github.com/mongodb/mongo
30 lines
1.1 KiB
JavaScript
30 lines
1.1 KiB
JavaScript
// Test a revoked CRL -- ensure that a connection is not allowed.
|
|
// Note: crl_client_revoked.pem is a CRL with the client.pem certificate listed as revoked.
|
|
// This test should test that the user cannot connect with client.pem certificate.
|
|
|
|
load('jstests/ssl/libs/ssl_helpers.js');
|
|
|
|
requireSSLProvider(['openssl', 'windows'], function() {
|
|
var md = MongoRunner.runMongod({
|
|
sslMode: "requireSSL",
|
|
sslPEMKeyFile: "jstests/libs/server.pem",
|
|
sslCAFile: "jstests/libs/ca.pem",
|
|
sslCRLFile: "jstests/libs/crl_client_revoked.pem"
|
|
});
|
|
|
|
var mongo = runMongoProgram("mongo",
|
|
"--port",
|
|
md.port,
|
|
"--ssl",
|
|
"--sslAllowInvalidCertificates",
|
|
"--sslPEMKeyFile",
|
|
"jstests/libs/client_revoked.pem",
|
|
"--eval",
|
|
";");
|
|
|
|
// 1 is the exit code for the shell failing to connect, which is what we want
|
|
// for a successful test.
|
|
assert(mongo == 1);
|
|
MongoRunner.stopMongod(md);
|
|
});
|