Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-34413

MONGODB-X509 fails on Windows with Native TLS

    • Type: Icon: Bug Bug
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 4.0.0-rc0
    • Affects Version/s: 3.7.3
    • Component/s: Security
    • None
    • Fully Compatible
    • ALL
    • Platforms 2018-04-23

      Now that SERVER-34344 is resolved Windows testing has uncovered another issue in master. The username for MONGODB-X509 doesn't seem to be parsed properly.

       [2018/04/10 18:16:14.425] ======================================================================
       [2018/04/10 18:16:14.425] ERROR [0.194s]: test_mongodb_x509_auth (test_ssl.TestSSL)
       [2018/04/10 18:16:14.672] ----------------------------------------------------------------------
       [2018/04/10 18:16:14.672] Traceback (most recent call last):
       ...
       [2018/04/10 18:16:14.672]   File "C:\data\mci\3881e811fc56f3917fc8d08ba600f76c\src\pymongo\helpers.py", line 145, in _check_command_response
       [2018/04/10 18:16:14.672]     raise OperationFailure(msg % errmsg, code, response)
       [2018/04/10 18:16:14.672] pymongo.errors.OperationFailure: Could not find user C=US,ST=California,L=Palo Alto,O="",OU=Drivers,CN=client@$external
       [2018/04/10 18:16:14.672] ----------------------------------------------------------------------
      
      2018-04-10T22:16:02.206+0000 I ACCESS   [conn878] Failed to authenticate C=US,ST=California,L=Palo Alto,O="",OU=Drivers,CN=client@$external from client 127.0.0.1:52070 with mechanism MONGODB-X509: UserNotFound: Could not find user C=US,ST=California,L=Palo Alto,O="",OU=Drivers,CN=client@$external
      
      2018-04-10T22:11:27.681+0000 I CONTROL  [initandlisten] targetMinOS: Windows 7/Windows Server 2008 R2
      2018-04-10T22:11:27.681+0000 I CONTROL  [initandlisten] db version v3.7.3-444-gf98493d311
      2018-04-10T22:11:27.681+0000 I CONTROL  [initandlisten] git version: f98493d3112905d2ad988b453b74d9555f5fdac8
      2018-04-10T22:11:27.681+0000 I CONTROL  [initandlisten] allocator: tcmalloc
      2018-04-10T22:11:27.681+0000 I CONTROL  [initandlisten] modules: enterprise 
      2018-04-10T22:11:27.681+0000 I CONTROL  [initandlisten] build environment:
      2018-04-10T22:11:27.682+0000 I CONTROL  [initandlisten]     distmod: windows-64
      2018-04-10T22:11:27.682+0000 I CONTROL  [initandlisten]     distarch: x86_64
      2018-04-10T22:11:27.682+0000 I CONTROL  [initandlisten]     target_arch: x86_64
      2018-04-10T22:11:27.682+0000 I CONTROL  [initandlisten] options: { config: "c:\data\mci\3881e811fc56f3917fc8d08ba600f76c\drivers-tools\.evergreen\orchestration\db\mongo-rap3na", net: { bindIp: "127.0.0.1,::1", compression: { compressors: "zlib,snappy,noop" }, ipv6: true, port: 27018, ssl: { CAFile: "C:/data/mci/3881e811fc56f3917fc8d08ba600f76c/drivers-tools/.evergreen/x509gen/ca.pem", PEMKeyFile: "C:/data/mci/3881e811fc56f3917fc8d08ba600f76c/drivers-tools/.evergreen/x509gen/server.pem", mode: "requireSSL", weakCertificateValidation: true } }, replication: { enableMajorityReadConcern: true, oplogSizeMB: 500, replSet: "repl0" }, security: { keyFile: "c:\data\mci\3881e811fc56f3917fc8d08ba600f76c\drivers-tools\.evergreen\orchestration\db\tmpdvp_p2\key" }, setParameter: { enableTestCommands: "1" }, storage: { dbPath: "c:\data\mci\3881e811fc56f3917fc8d08ba600f76c\drivers-tools\.evergreen\orchestration\db\mongo-y_uwa6", journal: { enabled: true }, mmapv1: { nsSize: 1, preallocDataFiles: false, smallFiles: true } }, systemLog: { destination: "file", path: "c:\data\mci\3881e811fc56f3917fc8d08ba600f76c\drivers-tools\.evergreen\orchestration\db\mongo-y_uwa6\mongod.log" } }
      

            Assignee:
            mark.benvenuto@mongodb.com Mark Benvenuto
            Reporter:
            bernie@mongodb.com Bernie Hackett
            Votes:
            0 Vote for this issue
            Watchers:
            10 Start watching this issue

              Created:
              Updated:
              Resolved: