[SERVER-11005] Add FIPS unit test for enterprise builds Created: 02/Oct/13  Updated: 19/Nov/14  Resolved: 05/Nov/14

Status: Closed
Project: Core Server
Component/s: Testing Infrastructure
Affects Version/s: None
Fix Version/s: 2.8.0-rc0

Type: Improvement Priority: Major - P3
Reporter: Eric Milkie Assignee: Ernie Hershey
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Duplicate
is duplicated by SERVER-11131 ssl_fips.js failing on Enterprise bui... Closed
Related
Tested
Backwards Compatibility: Fully Compatible
Sprint: BUILD 2.7.8, BUILD 2.8.0-rc2
Participants:

 Description   

Need a unit test in the enterprise build that simply starts the server with --sslFIPSMode and confirms that it starts up successfully. This should work on all Enterprise build platforms, including Windows.



 Comments   
Comment by Githook User [ 05/Nov/14 ]

Author:

{u'username': u'ehershey', u'name': u'Ernie Hershey', u'email': u'ernie.hershey@10gen.com'}

Message: SERVER-11005 Re-enable FIPS test
Branch: master
https://github.com/mongodb/mongo/commit/0bb84c4860d39833a2f65c94ece29d3bc7655add

Comment by Githook User [ 15/Nov/13 ]

Author:

{u'username': u'ehershey', u'name': u'Ernie Hershey', u'email': u'ernie.hershey@10gen.com'}

Message: SERVER-11005 re-disable ssl fips test
Branch: master
https://github.com/mongodb/mongo/commit/43b948a35d2e4080304ea90b0a2c62a8dc0fea58

Comment by auto [ 08/Nov/13 ]

Author:

{u'username': u'ehershey', u'name': u'Ernie Hershey', u'email': u'ernie.hershey@10gen.com'}

Message: SERVER-11005 in FIPS unit test, use --sslMode sslOnly instead of --sslOnNormalPorts
Branch: master
https://github.com/mongodb/mongo/commit/c9d07bdb8f92ec72c9ca8ddf6db821a2e087b3d0

Comment by auto [ 08/Nov/13 ]

Author:

{u'username': u'ehershey', u'name': u'Ernie Hershey', u'email': u'ernie.hershey@10gen.com'}

Message: SERVER-11005 in FIPS unit test, use --sslMode sslOnly instead of --sslOnNormalPorts
Branch: SERVER-11005
https://github.com/mongodb/mongo/commit/c9d07bdb8f92ec72c9ca8ddf6db821a2e087b3d0

Comment by auto [ 11/Oct/13 ]

Author:

{u'username': u'milkie', u'name': u'Eric Milkie', u'email': u'milkie@10gen.com'}

Message: SERVER-11005 disable ssl fips test
Branch: master
https://github.com/mongodb/mongo/commit/cb5f37d727bcdff4ff8b67b302ebdadd2fb75d15

Comment by Ernie Hershey [ 11/Oct/13 ]

RHEL 5.7 failure:
http://buildbot-special.10gen.cc:8081/builders/Nightly%20Linux%2064-bit%20Subscription%20RHEL%205.7/builds/605/steps/smokeSsl/logs/stdio
http://buildlogs.mongodb.org/Nightly%20Linux%2064-bit%20Subscription%20RHEL%205.7/builds/605/test/ssl/ssl_fips.js

RHEL 6.2 failure:
http://buildbot-special.10gen.cc:8081/builders/Nightly%20Linux%2064-bit%20Subscription%20RHEL%206.2/builds/626/steps/smokeSsl/logs/stdio
http://buildlogs.mongodb.org/Nightly%20Linux%2064-bit%20Subscription%20RHEL%206.2/builds/626/test/ssl/ssl_fips.js

Ubuntu 12 failure:
http://buildbot-special.10gen.cc:8081/builders/Nightly%20Linux%2064-bit%20Subscription%20Ubuntu%201204/builds/279/steps/smokeSsl/logs/stdio
http://buildlogs.mongodb.org/Nightly%20Linux%2064-bit%20Subscription%20Ubuntu%201204/builds/279/test/ssl/ssl_fips.js

SUSE 11 success:
http://buildbot-special.10gen.cc:8081/builders/Nightly%20Linux%2064-bit%20Subscription%20SUSE%2011/builds/591/steps/smokeSsl/logs/stdio
http://buildlogs.mongodb.org/Nightly%20Linux%2064-bit%20Subscription%20SUSE%2011/builds/591/test/ssl/ssl_fips.js

Amazon success:
http://buildbot-special.10gen.cc:8081/builders/Nightly%20Linux%2064-bit%20Subscription%20Amazon%20AMI/builds/682/steps/smokeSsl/logs/stdio
http://buildlogs.mongodb.org/Nightly%20Linux%2064-bit%20Subscription%20Amazon%20AMI/builds/682/test/ssl/ssl_fips.js

Comment by Ernie Hershey [ 11/Oct/13 ]

Can you add urls to the failures? Is mci breaking too?

Comment by Eric Milkie [ 11/Oct/13 ]

I'll need help diagnosing each of the builders.

Comment by Eric Milkie [ 11/Oct/13 ]

Actually two of the five buildbot Enterprise builders did pass the test. I was expecting more, though. I'll link some tickets. We may need to disable this test until we can catch up with all the config changes.

Comment by auto [ 10/Oct/13 ]

Author:

{u'username': u'milkie', u'name': u'Eric Milkie', u'email': u'milkie@10gen.com'}

Message: Merge pull request #519 from jameswahlin/SERVER-11005

SERVER-11005 - add jstest for --sslFIPSMode
Branch: master
https://github.com/mongodb/mongo/commit/ac290ee9b4edeca71c5d6575b851146e00ecd645

Comment by auto [ 10/Oct/13 ]

Author:

{u'username': u'milkie', u'name': u'Eric Milkie', u'email': u'milkie@10gen.com'}

Message: Merge pull request #519 from jameswahlin/SERVER-11005

SERVER-11005 - add jstest for --sslFIPSMode
Branch: master
https://github.com/mongodb/mongo/commit/ac290ee9b4edeca71c5d6575b851146e00ecd645

Comment by auto [ 10/Oct/13 ]

Author:

{u'name': u'James Wahlin', u'email': u'james.wahlin@10gen.com'}

Message: SERVER-11005 - add jstest for --sslFIPSMode
Branch: master
https://github.com/mongodb/mongo/commit/8e0d464a453fcaf6ebb6c1916542d642220e1da5

Generated at Thu Feb 08 03:24:37 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.