[SERVER-52858] Server-side MacOS and Windows SSL configuration doesn't fail if the PEM file is absent Created: 13/Nov/20  Updated: 29/Oct/23  Resolved: 08/Jan/21

Status: Closed
Project: Core Server
Component/s: None
Affects Version/s: 5.0 Desired
Fix Version/s: 4.9.0

Type: Bug Priority: Minor - P4
Reporter: Andrew Shuvalov (Inactive) Assignee: Sara Golemon
Resolution: Fixed Votes: 0
Labels: sharding-wfbf-day
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

MacOS


Issue Links:
Problem/Incident
is caused by SERVER-53763 SSLManagerWindows::initSSLContext() s... Closed
Related
related to SERVER-51599 Allow creating an SSLConnectionContex... Closed
Backwards Compatibility: Fully Compatible
Operating System: OS X
Sprint: Security 2021-01-11
Participants:

 Description   

This is an existing problem discovered by a new test. Apparently MacOS SSL configuration just doesn't fail if the PEM file is not provided.

The new test reproducing the problem (which I'm commenting out for now for Apple) is 
InitContextFromFileShouldFail in src/mongo/util/net/ssl_manager_test.cpp.

 

Update: found the same failure on Windows, though it works on Linux as expected.
 



 Comments   
Comment by Ian Whalen (Inactive) [ 09/Jan/21 ]

Author:

{'username': u'evrg-bot-webhook', 'name': u'Sara Golemon', 'email': u'sara.golemon@mongodb.com'}

Message:SERVER-52858 Move configuration validation to integration test
Branch:master
https://github.com/mongodb/mongo/commit/79b204dfb37dedf99c6fcc13fce63c75d63860f8

Comment by Githook User [ 15/Nov/20 ]

Author:

{'name': 'Andrew Shuvalov', 'email': 'andrew.shuvalov@mongodb.com', 'username': 'shuvalov-mdb'}

Message: SERVER-51599: BFG-723730 fix Windows build of ssl_manager_test.cpp and filed SERVER-52858
Branch: master
https://github.com/mongodb/mongo/commit/67197d16f71ca846adc4ad9b7d19cfd1d56b95e7

Generated at Thu Feb 08 05:29:13 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.