[SERVER-50333] mongo shell ignores TestData.encryptionCipherMode specified in test suites Created: 17/Aug/20  Updated: 29/Oct/23  Resolved: 22/Oct/20

Status: Closed
Project: Core Server
Component/s: Shell
Affects Version/s: None
Fix Version/s: 4.9.0

Type: Bug Priority: Major - P3
Reporter: Igor Solodovnikov Assignee: Adam Cooper (Inactive)
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Backwards Compatibility: Fully Compatible
Operating System: ALL
Steps To Reproduce:

Start resmoke with one of the GCM test suites and check what parameters are passed to mongod instances.

Sprint: Security 2020-10-05, Security 2020-10-19, Security 2020-11-02
Participants:

 Description   

There are several test suites for testing encrypted storage with GCM cipher mode:

  • sharding_ese_gcm.yml
  • replica_sets_ese_gcm.yml
  • aggregation_ese_gcm.yml
  • core_ese_gcm.yml

Those suites assign 'AES256-GCM' value to the TestData.encryptionCipherMode , but the mongo shell ignores it and starts mongod without --encryptionCipherMode parameter.

Thus mongod uses default CBC cipher so it wouldn't be testing GCM at all.



 Comments   
Comment by Githook User [ 21/Oct/20 ]

Author:

{'name': 'Adam Cooper', 'email': 'adam.cooper@mongodb.com', 'username': 'super-cooper'}

Message: SERVER-50333 mongo shell ignores TestData.encryptionCipherMode specified in test suites
Branch: master
https://github.com/mongodb/mongo/commit/392a8a1a0489d406f792a7473f4bb06788d731e9

Comment by Eric Sedor [ 19/Aug/20 ]

Thanks igorsol, I'm passing this on to an appropriate team to take a look.

Generated at Thu Feb 08 05:22:23 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.