mongo 1.8.6 → 2.15.1

data/spec/support/certificates/server-second-level.pem

@@ -0,0 +1,101 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 78086 (0x13106)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN = intermediate-server, OU = Ruby Driver, O = MongoDB, L = New York City, ST = New York, C = US
+        Validity
+            Not Before: Feb 24 22:50:04 2020 GMT
+            Not After : Feb 24 22:50:04 2040 GMT
+        Subject: CN = localhost, OU = Ruby Driver, O = MongoDB, L = New York City, ST = New York, C = US
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (2048 bit)
+                Modulus:
+                    00:8d:fb:0f:3a:2f:65:aa:a5:0c:1a:d2:2b:3f:f6:
+                    c8:58:a3:03:35:97:47:6c:8e:a2:3e:b4:11:f0:51:
+                    a7:a3:f9:ab:a1:89:53:48:93:e6:bf:54:e0:bb:3d:
+                    f2:83:e1:b8:df:15:cd:05:f7:1e:82:c0:41:c4:8f:
+                    62:e5:91:3f:89:64:62:13:05:bc:51:51:6f:6f:83:
+                    44:6a:e5:3c:e3:56:ff:a1:bb:14:5c:16:fe:97:a5:
+                    66:7c:5d:46:55:82:18:5e:21:4c:cf:e8:7d:73:9e:
+                    ed:33:72:c9:cf:2e:31:fe:11:af:95:1c:b9:5a:23:
+                    6e:11:3a:6b:36:c2:21:2c:98:d3:9d:c6:e1:41:22:
+                    68:ed:b6:0b:7b:7d:11:c6:d2:31:6e:58:58:c3:e9:
+                    21:0a:23:1e:82:84:40:2f:f3:ab:b8:65:d7:08:82:
+                    8a:21:9f:a3:f1:32:13:2f:ce:51:c4:f6:36:29:b7:
+                    44:6e:95:50:2b:66:97:8c:59:0d:d9:93:4d:2a:1c:
+                    2b:dc:70:c2:80:c4:1a:ce:10:af:37:21:3b:38:71:
+                    dd:93:c7:de:80:1c:07:50:d4:20:b8:b8:a4:67:c7:
+                    1e:98:4d:c9:0b:c8:85:19:44:1d:1f:72:3c:b9:ff:
+                    b1:dd:09:62:c9:f3:5e:df:ff:db:b3:7d:d8:09:d2:
+                    84:43
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:localhost, IP Address:127.0.0.1, DNS:localhost.test.build.10gen.cc
+    Signature Algorithm: sha256WithRSAEncryption
+         3a:2c:98:cc:63:78:18:f4:2f:26:92:da:04:f9:3d:18:80:81:
+         27:85:75:23:7b:77:da:49:92:c6:0e:2b:14:3e:3e:68:a4:40:
+         e9:e4:d2:c2:b6:c4:99:12:17:88:47:f6:c6:f4:62:cb:a9:13:
+         1a:d5:7e:da:4e:54:ee:0c:f1:e9:21:82:8d:b7:64:4d:63:3c:
+         33:d5:06:b4:3d:04:7f:d0:04:ef:27:47:3f:e4:9d:eb:1d:46:
+         86:80:61:7b:25:03:0b:e9:24:49:68:8b:af:e3:0e:28:b8:dd:
+         02:9d:fb:49:d4:56:f1:7c:16:66:31:b4:42:d3:0f:3a:fe:c8:
+         9e:a9:85:25:5f:e1:57:78:c3:22:77:0f:1d:f4:32:7f:10:60:
+         00:73:7a:f9:91:af:47:57:74:5d:6f:21:f9:ba:0d:43:c0:e9:
+         98:20:2f:47:2d:4d:3b:37:c3:02:b4:56:7c:fe:f5:47:6b:cb:
+         79:65:a6:d5:cd:dd:3e:66:69:b1:23:59:d2:90:70:8a:95:82:
+         cf:7a:9d:02:82:b9:c2:ff:76:55:cb:57:c7:ae:41:36:09:69:
+         df:08:b0:9a:11:12:1b:c0:25:ce:24:9f:ce:5e:b5:5b:07:b4:
+         4e:4e:c1:a1:bd:7b:4d:24:13:38:dd:d6:49:21:91:d1:c9:ac:
+         c1:bd:fc:7f
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

data/spec/support/certificates/server.pem

@@ -0,0 +1,101 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 210471 (0x33627)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN = Ruby Driver CA, OU = Drivers, O = MongoDB, L = New York City, ST = New York, C = US
+        Validity
+            Not Before: Feb 14 20:57:50 2019 GMT
+            Not After : Feb 14 20:57:50 2039 GMT
+        Subject: CN = localhost, OU = Drivers, O = MongoDB, L = New York City, ST = New York, C = US
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (2048 bit)
+                Modulus:
+                    00:d3:29:70:81:e1:41:92:c0:cc:9b:92:0c:a9:17:
+                    02:95:2e:55:0d:80:f3:2e:5d:27:24:db:4f:a6:6a:
+                    a9:ce:66:bd:4e:7c:eb:01:04:28:68:11:40:39:0e:
+                    ff:67:ba:4c:fe:05:7f:cb:e1:37:33:36:1e:a4:ee:
+                    62:02:6b:a6:d1:b3:24:de:a5:1f:34:1c:b2:f1:c8:
+                    04:09:09:fe:28:e0:23:ef:7d:47:1b:55:b5:ce:41:
+                    0d:4a:55:3c:65:19:f1:c5:56:69:d3:17:1a:cc:43:
+                    26:23:22:d3:f8:0c:85:21:9b:6e:fd:9e:bb:b1:19:
+                    db:d8:10:74:7b:0f:f2:c6:b3:0a:d0:83:c6:48:c3:
+                    99:71:f8:49:cf:f3:99:5b:eb:a1:c0:e9:6c:e8:a6:
+                    84:ac:2e:1f:56:c2:1f:02:90:be:5e:ee:b7:b5:7d:
+                    9b:5f:c2:76:23:c0:d8:8d:1b:52:f7:0d:21:1e:aa:
+                    22:08:48:2f:ce:b4:a2:d4:92:fa:58:14:35:77:b2:
+                    20:9e:52:b6:32:7b:b0:8a:49:33:83:52:57:ba:8e:
+                    d9:12:8a:4d:54:f3:0e:26:c2:8b:c9:28:83:1a:34:
+                    a1:a1:ee:b8:47:1e:d4:9d:b4:2e:90:15:c1:ef:a3:
+                    c6:9f:7b:2d:37:08:8b:3a:4a:f5:25:58:87:60:7f:
+                    d7:ab
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:localhost, IP Address:127.0.0.1, IP Address:0:0:0:0:0:0:0:1
+    Signature Algorithm: sha256WithRSAEncryption
+         83:4c:55:bb:f9:09:c9:db:6e:ca:2b:91:36:78:f9:2e:26:5a:
+         b0:4f:1b:2c:61:45:dc:c8:3b:7c:3d:31:b5:78:01:a1:07:2c:
+         c6:d4:05:d9:61:d2:23:74:89:0c:50:8c:a1:86:94:a9:95:4c:
+         0e:01:3d:60:3e:5a:79:24:09:41:80:63:59:d4:b1:85:bf:2e:
+         c3:f0:e8:40:b4:56:01:1f:4b:79:69:f1:54:f9:97:b9:46:b5:
+         6f:d1:56:a0:f1:de:5f:7e:03:61:53:ff:6a:fc:b3:d6:ea:ab:
+         80:1c:24:89:a1:64:41:62:53:50:f1:74:02:36:04:22:37:8a:
+         d8:10:85:af:6b:3a:00:34:d6:13:7a:2e:de:24:ed:ef:e7:7f:
+         ac:f9:12:70:8e:d7:b2:5b:c1:ab:5a:9d:7d:8a:76:e9:9c:54:
+         4e:6d:ed:41:d5:00:bf:14:b9:d1:1a:d0:42:81:ab:04:1f:84:
+         0d:ba:f8:40:eb:b8:88:40:82:75:2d:9e:94:51:e3:fb:21:b0:
+         9a:55:9e:84:b4:5e:a7:e3:cb:b3:6c:0c:15:56:af:7d:6e:ad:
+         13:90:29:30:c7:ed:68:3f:b3:9e:ae:3c:30:e1:8b:39:3a:41:
+         42:24:34:76:90:49:d6:51:3d:ee:86:85:3d:fb:dd:e1:f2:37:
+         a3:13:c1:e5
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

data/spec/support/client_registry.rb

@@ -0,0 +1,254 @@
+# frozen_string_literal: true
+# encoding: utf-8
+
+require 'singleton'
+
+module Mongo
+  class Client
+    alias :with_without_registry :with
+    def with(*args)
+      with_without_registry(*args).tap do |client|
+        ClientRegistry.instance.register_local_client(client)
+      end
+    end
+  end
+end
+
+# Test suite uses a number of global clients (with lifetimes spanning
+# several tests) as well as local clients (created for a single example
+# or shared across several examples in one example group).
+#
+# To make client cleanup easy, all local clients are automatically closed
+# after every example. This means there is no need for an individual example
+# to worry about closing its local clients.
+#
+# In SDAM tests, having global clients is problematic because mocks can
+# be executed on global clients instead of the local clients.
+# To address this, tests can close all global clients. This kills monitoring
+# threads and SDAM on the global clients. Later tests that need one of the
+# global clients will have the respective global client reconnected
+# automatically by the client registry.
+#
+# Lastly, Client#with sometimes creates a new cluster and sometimes reuses
+# the cluster on the receiver. Client registry patches Mongo::Client to
+# track all clients returned by Client#with, and considers these clients
+# local to the example being run. This means global clients should not be
+# created via #with. Being local clients, clients created by #with will be
+# automatically closed after each example. If these clients shared their
+# cluster with a global client, this will make the global client not do
+# SDAM anymore; this situation is automatically fixed by the client registry
+# when a subsequent test requests the global client in question.
+class ClientRegistry
+  include Singleton
+
+  def initialize
+    # clients local to an example.
+    # any clients in @clients can be closed in an after hook
+    @local_clients = []
+    # clients global to the test suite, should not be closed in an after hooks
+    # but their monitoring may need to be suspended/resumed
+    @global_clients = {}
+
+    # JRuby appears to somehow manage to access client registry concurrently
+    @lock = Mutex.new
+  end
+
+  class << self
+    def client_perished?(client)
+      if !client.cluster.connected?
+        true
+      else
+        perished = false
+        client.cluster.servers_list.each do |server|
+          thread = server.monitor.instance_variable_get('@thread')
+          if thread.nil? || !thread.alive?
+            perished = true
+          end
+        end
+        perished
+      end
+    end
+    private :client_perished?
+
+    def reconnect_client_if_perished(client)
+      if client_perished?(client)
+        client.reconnect
+      end
+    end
+  end
+
+  def global_client(name)
+    if client = @global_clients[name]
+      self.class.reconnect_client_if_perished(client)
+      return client
+    end
+
+    @global_clients[name] = new_global_client(name)
+  end
+
+  def new_global_client(name)
+    case name
+    # Provides a basic scanned client to do a hello check.
+    when 'basic'
+      Mongo::Client.new(
+        SpecConfig.instance.addresses,
+        SpecConfig.instance.test_options.merge(database: SpecConfig.instance.test_db),
+      )
+    # Provides an unauthorized mongo client on the default test database.
+    when 'unauthorized'
+      Mongo::Client.new(
+        SpecConfig.instance.addresses,
+        SpecConfig.instance.test_options.merge(database: SpecConfig.instance.test_db),
+      )
+    # Provides an authorized mongo client on the default test database for the
+    # default test user.
+    when 'authorized'
+      client_options = {
+        database: SpecConfig.instance.test_db,
+      }.update(SpecConfig.instance.credentials_or_external_user(
+        user: SpecConfig.instance.test_user.name,
+        password: SpecConfig.instance.test_user.password,
+        auth_source: 'admin',
+      ))
+
+      Mongo::Client.new(
+        SpecConfig.instance.addresses,
+        SpecConfig.instance.test_options.merge(client_options)
+      )
+    # Provides an authorized mongo client that retries writes.
+    when 'authorized_with_retry_writes'
+      global_client('authorized').with(
+        retry_writes: true,
+        server_selection_timeout: 4.97,
+      )
+    # Provides an authorized mongo client that uses legacy read retry logic.
+    when 'authorized_without_retry_reads'
+      global_client('authorized').with(
+        retry_reads: false,
+        server_selection_timeout: 4.27,
+      )
+    # Provides an authorized mongo client that does not retry reads at all.
+    when 'authorized_without_any_retry_reads'
+      global_client('authorized').with(
+        retry_reads: false, max_read_retries: 0,
+        server_selection_timeout: 4.27,
+      )
+    # Provides an authorized mongo client that does not retry writes,
+    # overriding global test suite option to retry writes if necessary.
+    when 'authorized_without_retry_writes'
+      global_client('authorized').with(
+        retry_writes: false,
+        server_selection_timeout: 4.99,
+      )
+    # Provides an authorized mongo client that does not retry writes
+    # using either modern or legacy mechanisms.
+    when 'authorized_without_any_retry_writes'
+      global_client('authorized').with(
+        retry_writes: false, max_write_retries: 0,
+        server_selection_timeout: 4.99,
+      )
+    # Provides an authorized mongo client that does not retry reads or writes
+    # at all.
+    when 'authorized_without_any_retries'
+      global_client('authorized').with(
+        retry_reads: false, max_read_retries: 0,
+        retry_writes: false, max_write_retries: 0,
+        server_selection_timeout: 4.27,
+      )
+    # Provides an unauthorized mongo client on the admin database, for use in
+    # setting up the first admin root user.
+    when 'admin_unauthorized'
+      Mongo::Client.new(
+        SpecConfig.instance.addresses,
+        SpecConfig.instance.test_options.merge(
+          database: Mongo::Database::ADMIN,
+          monitoring: false),
+      )
+    # Get an authorized client on the test database logged in as the admin
+    # root user.
+    when 'root_authorized'
+      if SpecConfig.instance.x509_auth?
+        client_options = SpecConfig.instance.auth_options.merge(
+          database: SpecConfig.instance.test_db,
+        )
+      else
+        client_options = {
+          database: SpecConfig.instance.test_db,
+        }.update(SpecConfig.instance.credentials_or_external_user(
+          user: SpecConfig.instance.root_user.name,
+          password: SpecConfig.instance.root_user.password,
+          auth_source: SpecConfig.instance.auth_source || Mongo::Database::ADMIN,
+        ))
+      end
+
+      Mongo::Client.new(
+        SpecConfig.instance.addresses,
+        SpecConfig.instance.test_options.merge(client_options),
+      )
+    else
+      raise "Don't know how to construct global client #{name}"
+    end
+  end
+  private :new_global_client
+
+  def new_local_client(*args, &block)
+    if block_given?
+      Mongo::Client.new(*args, &block)
+    else
+      Mongo::Client.new(*args).tap do |client|
+        @lock.synchronize do
+          @local_clients << client
+        end
+      end
+    end
+  end
+
+  def register_local_client(client)
+    @lock.synchronize do
+      @local_clients << client
+    end
+    client
+  end
+
+  def close_local_clients
+    @lock.synchronize do
+      @local_clients.each do |client|
+        # If this client shares cluster with any of the global clients,
+        # do not disconnect the cluster so that the global clients continue
+        # working into the next test(s).
+        # If this client does not share cluster with any global clients,
+        # this client can be closed completely via the #close method.
+        #
+        # Clients can also have slaved auto encryption objects (mongocryptd
+        # client and key vault client) which also need to be cleaned up.
+        # These slaved objects are always unique to the client which hosts
+        # them - they are never shared between clients. Therefore, we
+        # always tear down encryption objects for each local client here.
+        # This is done either as part of #close if #close is invoked, or
+        # explicitly if #close is not invoked due to cluster sharing.
+        cluster = client.cluster
+        if @global_clients.none? { |name, global_client|
+          cluster.object_id == global_client.cluster.object_id
+        }
+          # Cluster not shared, disconnect cluster and clean up encryption.
+          client.close
+        else
+          # Cluster is shared, clean up encryption only.
+          client.close_encrypter
+        end
+      end
+
+      @local_clients = []
+    end
+  end
+
+  def close_all_clients
+    ClusterTools.instance.close_clients
+    close_local_clients
+    @lock.synchronize do
+      @global_clients.each do |name, client|
+        client.close
+      end
+    end
+  end
+end

data/spec/support/client_registry_macros.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+# encoding: utf-8
+
+module ClientRegistryMacros
+  def new_local_client(address, options=nil, &block)
+    ClientRegistry.instance.new_local_client(address, options, &block)
+  end
+
+  def new_local_client_nmio(address, options=nil, &block)
+    # Avoid type converting options.
+    base_options = {monitoring_io: false}
+    if BSON::Document === options || options&.keys&.any? { |key| String === key }
+      base_options = Mongo::Options::Redacted.new(base_options)
+    end
+    options = if options
+      base_options.merge(options)
+    else
+      base_options
+    end
+    new_local_client(address, options, &block)
+  end
+
+  def close_local_clients
+    ClientRegistry.instance.close_local_clients
+  end
+end