mongo 2.15.0 → 2.18.1

data/spec/support/certificates/atlas-ocsp-ca.crt

@@ -2,117 +2,102 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            91:2b:08:4a:cf:0c:18:a7:53:f6:d6:2e:25:a7:5f:5a
+            06:d8:d9:04:d5:58:43:46:f6:8a:2f:a7:54:22:7e:c4
         Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = US, O = Internet Security Research Group, CN = ISRG Root X1
+        Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
         Validity
-            Not Before: Sep  4 00:00:00 2020 GMT
-            Not After : Sep 15 16:00:00 2025 GMT
-        Subject: C = US, O = Let's Encrypt, CN = R3
+            Not Before: Apr 14 00:00:00 2021 GMT
+            Not After : Apr 13 23:59:59 2031 GMT
+        Subject: C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
+                Public-Key: (2048 bit)
                 Modulus:
-                    00:bb:02:15:28:cc:f6:a0:94:d3:0f:12:ec:8d:55:
-                    92:c3:f8:82:f1:99:a6:7a:42:88:a7:5d:26:aa:b5:
-                    2b:b9:c5:4c:b1:af:8e:6b:f9:75:c8:a3:d7:0f:47:
-                    94:14:55:35:57:8c:9e:a8:a2:39:19:f5:82:3c:42:
-                    a9:4e:6e:f5:3b:c3:2e:db:8d:c0:b0:5c:f3:59:38:
-                    e7:ed:cf:69:f0:5a:0b:1b:be:c0:94:24:25:87:fa:
-                    37:71:b3:13:e7:1c:ac:e1:9b:ef:db:e4:3b:45:52:
-                    45:96:a9:c1:53:ce:34:c8:52:ee:b5:ae:ed:8f:de:
-                    60:70:e2:a5:54:ab:b6:6d:0e:97:a5:40:34:6b:2b:
-                    d3:bc:66:eb:66:34:7c:fa:6b:8b:8f:57:29:99:f8:
-                    30:17:5d:ba:72:6f:fb:81:c5:ad:d2:86:58:3d:17:
-                    c7:e7:09:bb:f1:2b:f7:86:dc:c1:da:71:5d:d4:46:
-                    e3:cc:ad:25:c1:88:bc:60:67:75:66:b3:f1:18:f7:
-                    a2:5c:e6:53:ff:3a:88:b6:47:a5:ff:13:18:ea:98:
-                    09:77:3f:9d:53:f9:cf:01:e5:f5:a6:70:17:14:af:
-                    63:a4:ff:99:b3:93:9d:dc:53:a7:06:fe:48:85:1d:
-                    a1:69:ae:25:75:bb:13:cc:52:03:f5:ed:51:a1:8b:
-                    db:15
+                    00:c1:4b:b3:65:47:70:bc:dd:4f:58:db:ec:9c:ed:
+                    c3:66:e5:1f:31:13:54:ad:4a:66:46:1f:2c:0a:ec:
+                    64:07:e5:2e:dc:dc:b9:0a:20:ed:df:e3:c4:d0:9e:
+                    9a:a9:7a:1d:82:88:e5:11:56:db:1e:9f:58:c2:51:
+                    e7:2c:34:0d:2e:d2:92:e1:56:cb:f1:79:5f:b3:bb:
+                    87:ca:25:03:7b:9a:52:41:66:10:60:4f:57:13:49:
+                    f0:e8:37:67:83:df:e7:d3:4b:67:4c:22:51:a6:df:
+                    0e:99:10:ed:57:51:74:26:e2:7d:c7:ca:62:2e:13:
+                    1b:7f:23:88:25:53:6f:c1:34:58:00:8b:84:ff:f8:
+                    be:a7:58:49:22:7b:96:ad:a2:88:9b:15:bc:a0:7c:
+                    df:e9:51:a8:d5:b0:ed:37:e2:36:b4:82:4b:62:b5:
+                    49:9a:ec:c7:67:d6:e3:3e:f5:e3:d6:12:5e:44:f1:
+                    bf:71:42:7d:58:84:03:80:b1:81:01:fa:f9:ca:32:
+                    bb:b4:8e:27:87:27:c5:2b:74:d4:a8:d6:97:de:c3:
+                    64:f9:ca:ce:53:a2:56:bc:78:17:8e:49:03:29:ae:
+                    fb:49:4f:a4:15:b9:ce:f2:5c:19:57:6d:6b:79:a7:
+                    2b:a2:27:20:13:b5:d0:3d:40:d3:21:30:07:93:ea:
+                    99:f5
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
-            X509v3 Key Usage: critical
-                Digital Signature, Certificate Sign, CRL Sign
-            X509v3 Extended Key Usage: 
-                TLS Web Client Authentication, TLS Web Server Authentication
             X509v3 Basic Constraints: critical
                 CA:TRUE, pathlen:0
             X509v3 Subject Key Identifier: 
-                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
+                B7:6B:A2:EA:A8:AA:84:8C:79:EA:B4:DA:0F:98:B2:C5:95:76:B9:F4
             X509v3 Authority Key Identifier: 
-                keyid:79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
-
+                03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
+            X509v3 Key Usage: critical
+                Digital Signature, Certificate Sign, CRL Sign
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
             Authority Information Access: 
-                CA Issuers - URI:http://x1.i.lencr.org/
-
+                OCSP - URI:http://ocsp.digicert.com
+                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootCA.crt
             X509v3 CRL Distribution Points: 
-
                 Full Name:
-                  URI:http://x1.c.lencr.org/
-
+                  URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl
             X509v3 Certificate Policies: 
+                Policy: 2.16.840.1.114412.2.1
+                Policy: 2.23.140.1.1
                 Policy: 2.23.140.1.2.1
-                Policy: 1.3.6.1.4.1.44947.1.1.1
-
+                Policy: 2.23.140.1.2.2
+                Policy: 2.23.140.1.2.3
     Signature Algorithm: sha256WithRSAEncryption
-         85:ca:4e:47:3e:a3:f7:85:44:85:bc:d5:67:78:b2:98:63:ad:
-         75:4d:1e:96:3d:33:65:72:54:2d:81:a0:ea:c3:ed:f8:20:bf:
-         5f:cc:b7:70:00:b7:6e:3b:f6:5e:94:de:e4:20:9f:a6:ef:8b:
-         b2:03:e7:a2:b5:16:3c:91:ce:b4:ed:39:02:e7:7c:25:8a:47:
-         e6:65:6e:3f:46:f4:d9:f0:ce:94:2b:ee:54:ce:12:bc:8c:27:
-         4b:b8:c1:98:2f:a2:af:cd:71:91:4a:08:b7:c8:b8:23:7b:04:
-         2d:08:f9:08:57:3e:83:d9:04:33:0a:47:21:78:09:82:27:c3:
-         2a:c8:9b:b9:ce:5c:f2:64:c8:c0:be:79:c0:4f:8e:6d:44:0c:
-         5e:92:bb:2e:f7:8b:10:e1:e8:1d:44:29:db:59:20:ed:63:b9:
-         21:f8:12:26:94:93:57:a0:1d:65:04:c1:0a:22:ae:10:0d:43:
-         97:a1:18:1f:7e:e0:e0:86:37:b5:5a:b1:bd:30:bf:87:6e:2b:
-         2a:ff:21:4e:1b:05:c3:f5:18:97:f0:5e:ac:c3:a5:b8:6a:f0:
-         2e:bc:3b:33:b9:ee:4b:de:cc:fc:e4:af:84:0b:86:3f:c0:55:
-         43:36:f6:68:e1:36:17:6a:8e:99:d1:ff:a5:40:a7:34:b7:c0:
-         d0:63:39:35:39:75:6e:f2:ba:76:c8:93:02:e9:a9:4b:6c:17:
-         ce:0c:02:d9:bd:81:fb:9f:b7:68:d4:06:65:b3:82:3d:77:53:
-         f8:8e:79:03:ad:0a:31:07:75:2a:43:d8:55:97:72:c4:29:0e:
-         f7:c4:5d:4e:c8:ae:46:84:30:d7:f2:85:5f:18:a1:79:bb:e7:
-         5e:70:8b:07:e1:86:93:c3:b9:8f:dc:61:71:25:2a:af:df:ed:
-         25:50:52:68:8b:92:dc:e5:d6:b5:e3:da:7d:d0:87:6c:84:21:
-         31:ae:82:f5:fb:b9:ab:c8:89:17:3d:e1:4c:e5:38:0e:f6:bd:
-         2b:bd:96:81:14:eb:d5:db:3d:20:a7:7e:59:d3:e2:f8:58:f9:
-         5b:b8:48:cd:fe:5c:4f:16:29:fe:1e:55:23:af:c8:11:b0:8d:
-         ea:7c:93:90:17:2f:fd:ac:a2:09:47:46:3f:f0:e9:b0:b7:ff:
-         28:4d:68:32:d6:67:5e:1e:69:a3:93:b8:f5:9d:8b:2f:0b:d2:
-         52:43:a6:6f:32:57:65:4d:32:81:df:38:53:85:5d:7e:5d:66:
-         29:ea:b8:dd:e4:95:b5:cd:b5:56:12:42:cd:c4:4e:c6:25:38:
-         44:50:6d:ec:ce:00:55:18:fe:e9:49:64:d4:4e:ca:97:9c:b4:
-         5b:c0:73:a8:ab:b8:47:c2
+    Signature Value:
+        80:32:ce:5e:0b:dd:6e:5a:0d:0a:af:e1:d6:84:cb:c0:8e:fa:
+        85:70:ed:da:5d:b3:0c:f7:2b:75:40:fe:85:0a:fa:f3:31:78:
+        b7:70:4b:1a:89:58:ba:80:bd:f3:6b:1d:e9:7e:cf:0b:ba:58:
+        9c:59:d4:90:d3:fd:6c:fd:d0:98:6d:b7:71:82:5b:cf:6d:0b:
+        5a:09:d0:7b:de:c4:43:d8:2a:a4:de:9e:41:26:5f:bb:8f:99:
+        cb:dd:ae:e1:a8:6f:9f:87:fe:74:b7:1f:1b:20:ab:b1:4f:c6:
+        f5:67:5d:5d:9b:3c:e9:ff:69:f7:61:6c:d6:d9:f3:fd:36:c6:
+        ab:03:88:76:d2:4b:2e:75:86:e3:fc:d8:55:7d:26:c2:11:77:
+        df:3e:02:b6:7c:f3:ab:7b:7a:86:36:6f:b8:f7:d8:93:71:cf:
+        86:df:73:30:fa:7b:ab:ed:2a:59:c8:42:84:3b:11:17:1a:52:
+        f3:c9:0e:14:7d:a2:5b:72:67:ba:71:ed:57:47:66:c5:b8:02:
+        4a:65:34:5e:8b:d0:2a:3c:20:9c:51:99:4c:e7:52:9e:f7:6b:
+        11:2b:0d:92:7e:1d:e8:8a:eb:36:16:43:87:ea:2a:63:bf:75:
+        3f:eb:de:c4:03:bb:0a:3c:f7:30:ef:eb:af:4c:fc:8b:36:10:
+        73:3e:f3:a4
+
 -----BEGIN CERTIFICATE-----
-MIIFFjCCAv6gAwIBAgIRAJErCErPDBinU/bWLiWnX1owDQYJKoZIhvcNAQELBQAw
-TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
-cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjAwOTA0MDAwMDAw
-WhcNMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg
-RW5jcnlwdDELMAkGA1UEAxMCUjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
-AoIBAQC7AhUozPaglNMPEuyNVZLD+ILxmaZ6QoinXSaqtSu5xUyxr45r+XXIo9cP
-R5QUVTVXjJ6oojkZ9YI8QqlObvU7wy7bjcCwXPNZOOftz2nwWgsbvsCUJCWH+jdx
-sxPnHKzhm+/b5DtFUkWWqcFTzjTIUu61ru2P3mBw4qVUq7ZtDpelQDRrK9O8Zutm
-NHz6a4uPVymZ+DAXXbpyb/uBxa3Shlg9F8fnCbvxK/eG3MHacV3URuPMrSXBiLxg
-Z3Vms/EY96Jc5lP/Ooi2R6X/ExjqmAl3P51T+c8B5fWmcBcUr2Ok/5mzk53cU6cG
-/kiFHaFpriV1uxPMUgP17VGhi9sVAgMBAAGjggEIMIIBBDAOBgNVHQ8BAf8EBAMC
-AYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYB
-Af8CAQAwHQYDVR0OBBYEFBQusxe3WFbLrlAJQOYfr52LFMLGMB8GA1UdIwQYMBaA
-FHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcw
-AoYWaHR0cDovL3gxLmkubGVuY3Iub3JnLzAnBgNVHR8EIDAeMBygGqAYhhZodHRw
-Oi8veDEuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYGZ4EMAQIBMA0GCysGAQQB
-gt8TAQEBMA0GCSqGSIb3DQEBCwUAA4ICAQCFyk5HPqP3hUSFvNVneLKYY611TR6W
-PTNlclQtgaDqw+34IL9fzLdwALduO/ZelN7kIJ+m74uyA+eitRY8kc607TkC53wl
-ikfmZW4/RvTZ8M6UK+5UzhK8jCdLuMGYL6KvzXGRSgi3yLgjewQtCPkIVz6D2QQz
-CkcheAmCJ8MqyJu5zlzyZMjAvnnAT45tRAxekrsu94sQ4egdRCnbWSDtY7kh+BIm
-lJNXoB1lBMEKIq4QDUOXoRgffuDghje1WrG9ML+Hbisq/yFOGwXD9RiX8F6sw6W4
-avAuvDszue5L3sz85K+EC4Y/wFVDNvZo4TYXao6Z0f+lQKc0t8DQYzk1OXVu8rp2
-yJMC6alLbBfODALZvYH7n7do1AZls4I9d1P4jnkDrQoxB3UqQ9hVl3LEKQ73xF1O
-yK5GhDDX8oVfGKF5u+decIsH4YaTw7mP3GFxJSqv3+0lUFJoi5Lc5da149p90Ids
-hCExroL1+7mryIkXPeFM5TgO9r0rvZaBFOvV2z0gp35Z0+L4WPlbuEjN/lxPFin+
-HlUjr8gRsI3qfJOQFy/9rKIJR0Y/8Omwt/8oTWgy1mdeHmmjk7j1nYsvC9JSQ6Zv
-MldlTTKB3zhThV1+XWYp6rjd5JW1zbVWEkLNxE7GJThEUG3szgBVGP7pSWTUTsqX
-nLRbwHOoq7hHwg==
------END CERTIFICATE-----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+-----END CERTIFICATE-----

data/spec/support/certificates/atlas-ocsp.crt

@@ -2,151 +2,151 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            03:b0:ae:e9:c3:eb:00:48:5d:67:c8:bf:bb:ee:4b:b6:d6:18
+            0e:fb:8b:f4:73:3e:98:df:1d:48:6d:da:d2:08:ca:0d
         Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = US, O = Let's Encrypt, CN = R3
+        Issuer: C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
         Validity
-            Not Before: May  5 19:36:15 2021 GMT
-            Not After : Aug  3 19:36:15 2021 GMT
-        Subject: CN = *.zbmx1.mongodb.net
+            Not Before: May  5 00:00:00 2022 GMT
+            Not After : Jun  2 23:59:59 2023 GMT
+        Subject: C = US, ST = New York, L = New York, O = "MongoDB, Inc.", CN = *.mongodb-dev.net
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (4096 bit)
+                Public-Key: (2048 bit)
                 Modulus:
-                    00:a4:a9:84:57:7b:6f:4c:fe:1f:9e:89:14:90:0e:
-                    56:92:00:51:59:1d:59:01:8a:69:0b:41:e4:73:8f:
-                    cc:21:ee:52:a0:9c:fe:47:20:be:58:e4:ce:8b:16:
-                    38:39:48:66:86:fe:6b:2e:d7:11:b0:95:78:4f:11:
-                    c6:6b:2a:f2:9a:37:78:1f:f1:47:39:cc:6e:cb:8c:
-                    b3:7a:ec:8b:7a:af:c5:15:ab:cf:e8:96:3f:63:e9:
-                    bf:58:1f:cb:96:b6:3c:49:c5:06:c3:6e:c2:73:8b:
-                    f1:76:1e:e9:b8:52:e8:5f:fd:e2:22:84:0a:a4:9d:
-                    09:7a:e3:ab:c5:a5:21:cc:e8:40:25:a1:df:f9:52:
-                    44:0a:92:cf:7b:72:6d:74:df:83:62:0b:83:6b:cf:
-                    e8:ae:91:ef:22:7b:6d:f3:fa:70:de:9e:cb:83:d9:
-                    3d:1c:54:84:14:6a:06:5b:4d:f4:95:40:fc:19:93:
-                    5c:c0:c1:2f:86:16:b0:84:b7:e4:26:93:9b:3a:ab:
-                    98:c3:cb:fb:ee:dd:f8:26:7f:6c:ae:7a:d2:65:dd:
-                    68:b3:51:59:bc:c1:3b:23:13:9b:6b:50:e5:87:c5:
-                    5c:07:7b:cb:c6:b9:17:7c:23:aa:77:49:5e:c1:93:
-                    5a:7d:fe:af:e3:3c:53:0d:61:7c:b2:e7:c4:7e:8f:
-                    cb:6d:d2:55:23:4b:d0:43:f5:20:51:58:15:c8:0c:
-                    cc:30:48:2d:01:4b:e9:d4:c6:ca:2d:00:74:05:b4:
-                    8c:3a:6b:3f:db:7a:33:96:17:28:87:56:0d:a1:1c:
-                    44:60:9a:ae:34:2a:61:ee:e2:42:b3:8b:89:ff:5d:
-                    fa:19:5d:b7:1f:db:0d:44:92:80:83:df:e0:11:88:
-                    7c:9a:96:f8:7f:5b:cb:6a:ea:44:e6:2c:33:0a:ef:
-                    32:d7:52:00:b6:30:86:43:d7:60:8b:33:0a:6c:43:
-                    9c:e9:7b:73:8b:fa:97:9f:23:d4:9a:90:a5:92:25:
-                    6d:03:b6:0e:33:30:5f:ac:04:0b:4c:cf:ab:82:04:
-                    56:21:f0:7a:19:55:b5:63:03:35:f9:a0:84:26:73:
-                    cd:4e:9a:c3:34:bc:9e:9c:61:28:6f:fb:1b:b8:a2:
-                    8e:4a:f8:b5:f2:03:3f:cd:f6:2c:70:bf:4b:f9:0d:
-                    6a:4c:87:be:58:4d:fa:ba:33:fc:29:e3:29:6e:b3:
-                    df:bb:4d:e7:46:93:d6:aa:40:b2:3f:cf:5d:46:5d:
-                    8b:17:ef:05:27:23:98:b7:db:59:73:2f:d2:7d:bf:
-                    f2:ff:67:fe:55:05:f2:4f:e7:d0:e4:43:3d:56:03:
-                    26:25:90:f2:28:4c:21:a1:28:ea:92:b0:a1:b6:9c:
-                    73:74:9b
+                    00:b3:40:eb:4a:26:af:07:a3:ea:58:c7:3b:50:5c:
+                    94:47:5a:0a:9d:86:b7:bb:03:9c:5a:4a:23:5e:7c:
+                    b1:cd:fc:4f:56:d5:05:4e:ce:f8:f2:b1:55:09:13:
+                    ff:cc:e6:a4:fb:41:2e:0c:8f:1a:a3:ea:4b:a3:51:
+                    c6:f7:91:e6:47:49:ae:3b:94:df:68:80:68:2a:62:
+                    a2:d1:42:5b:89:c1:70:2b:1c:a7:84:df:98:86:1a:
+                    69:eb:88:c4:51:4d:c9:7f:10:90:a0:0a:c5:7c:07:
+                    12:9e:c2:94:e1:88:2e:2d:21:94:a4:8a:27:1f:20:
+                    1b:6f:14:27:21:0c:4b:6f:72:5b:18:e7:75:7a:90:
+                    4c:a8:18:e7:4d:0f:ed:e4:03:f4:10:b7:65:23:9f:
+                    b2:5f:0d:eb:85:3c:b0:34:d3:9a:2c:80:85:2e:53:
+                    35:19:44:03:13:b3:df:fb:0d:db:80:6f:12:60:1a:
+                    b8:d6:25:0d:6d:23:fd:a6:d8:aa:dc:82:73:cc:d2:
+                    26:9b:71:50:9a:09:cf:ef:60:ba:d1:22:cb:fb:2f:
+                    69:a2:a6:c6:a9:30:77:1c:d7:bc:c2:6e:6d:e6:69:
+                    65:f3:91:3d:ee:04:f9:a0:41:5f:50:dc:75:15:4d:
+                    15:43:76:35:e9:97:65:7a:d8:3f:00:4d:44:29:7c:
+                    5d:25
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
+            X509v3 Authority Key Identifier: 
+                B7:6B:A2:EA:A8:AA:84:8C:79:EA:B4:DA:0F:98:B2:C5:95:76:B9:F4
+            X509v3 Subject Key Identifier: 
+                22:7C:2F:C7:F4:D6:75:0E:A1:02:32:21:1A:A6:29:25:46:48:B8:6A
+            X509v3 Subject Alternative Name: 
+                DNS:*.mongodb-dev.net, DNS:mongodb-dev.net
             X509v3 Key Usage: critical
                 Digital Signature, Key Encipherment
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
-            X509v3 Basic Constraints: critical
-                CA:FALSE
-            X509v3 Subject Key Identifier: 
-                51:08:03:39:2B:B7:41:3E:23:62:B9:88:A6:63:57:F8:44:FA:F2:4E
-            X509v3 Authority Key Identifier: 
-                keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
-
-            Authority Information Access: 
-                OCSP - URI:http://r3.o.lencr.org
-                CA Issuers - URI:http://r3.i.lencr.org/
-
-            X509v3 Subject Alternative Name: 
-                DNS:*.e10cb93a9cec74689d88fe1d.zbmx1.mongodb.net, DNS:*.zbmx1.mesh.mongodb.net, DNS:*.zbmx1.mongodb.net
+            X509v3 CRL Distribution Points: 
+                Full Name:
+                  URI:http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
+                Full Name:
+                  URI:http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
             X509v3 Certificate Policies: 
-                Policy: 2.23.140.1.2.1
-                Policy: 1.3.6.1.4.1.44947.1.1.1
-                  CPS: http://cps.letsencrypt.org
-
+                Policy: 2.23.140.1.2.2
+                  CPS: http://www.digicert.com/CPS
+            Authority Information Access: 
+                OCSP - URI:http://ocsp.digicert.com
+                CA Issuers - URI:http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
+            X509v3 Basic Constraints: 
+                CA:FALSE
             CT Precertificate SCTs: 
                 Signed Certificate Timestamp:
                     Version   : v1 (0x0)
-                    Log ID    : 94:20:BC:1E:8E:D5:8D:6C:88:73:1F:82:8B:22:2C:0D:
-                                D1:DA:4D:5E:6C:4F:94:3D:61:DB:4E:2F:58:4D:A2:C2
-                    Timestamp : May  5 20:36:15.187 2021 GMT
+                    Log ID    : E8:3E:D0:DA:3E:F5:06:35:32:E7:57:28:BC:89:6B:C9:
+                                03:D3:CB:D1:11:6B:EC:EB:69:E1:77:7D:6D:06:BD:6E
+                    Timestamp : May  5 16:12:54.726 2022 GMT
                     Extensions: none
                     Signature : ecdsa-with-SHA256
-                                30:46:02:21:00:E9:D3:00:E2:90:87:44:5A:D7:10:53:
-                                65:F4:E0:E3:3C:D3:C7:75:69:B3:BE:53:F3:00:24:58:
-                                C2:9D:37:D6:81:02:21:00:B9:4F:54:00:FF:76:90:EB:
-                                69:7C:F4:D7:23:5A:29:26:F0:26:2E:3B:D2:72:1D:82:
-                                21:EF:93:01:E3:08:BB:30
+                                30:45:02:21:00:C4:D8:1A:00:3C:BD:E5:E1:13:B2:5D:
+                                DA:7F:69:A9:4C:83:AB:CC:C2:00:9F:FB:98:09:44:5F:
+                                93:0C:92:CD:F7:02:20:2D:E2:D6:A4:3B:61:06:25:1E:
+                                22:2F:5E:2A:D4:76:0D:FE:12:E9:91:65:26:69:25:6C:
+                                53:E4:C3:2F:4B:89:AF
                 Signed Certificate Timestamp:
                     Version   : v1 (0x0)
-                    Log ID    : 7D:3E:F2:F8:8F:FF:88:55:68:24:C2:C0:CA:9E:52:89:
-                                79:2B:C5:0E:78:09:7F:2E:6A:97:68:99:7E:22:F0:D7
-                    Timestamp : May  5 20:36:15.245 2021 GMT
+                    Log ID    : 35:CF:19:1B:BF:B1:6C:57:BF:0F:AD:4C:6D:42:CB:BB:
+                                B6:27:20:26:51:EA:3F:E1:2A:EF:A8:03:C3:3B:D6:4C
+                    Timestamp : May  5 16:12:54.786 2022 GMT
                     Extensions: none
                     Signature : ecdsa-with-SHA256
-                                30:45:02:20:3D:A9:45:35:70:71:18:45:B8:15:53:60:
-                                42:1D:6E:50:F4:DC:68:A2:D0:45:03:66:3A:8E:B7:58:
-                                FC:AD:E2:45:02:21:00:FA:79:91:BF:4F:FA:45:76:90:
-                                D5:61:D8:33:97:71:AA:16:4C:0E:A2:19:14:9F:69:FE:
-                                B8:00:A1:23:22:86:01
+                                30:45:02:20:46:F0:9E:AE:32:A7:A7:CA:22:C6:64:EE:
+                                7F:9F:C6:EA:3C:BE:3B:2F:E2:09:C0:ED:A9:E1:EE:16:
+                                F9:F1:6C:1E:02:21:00:BD:1A:42:73:A5:CE:E6:8A:CE:
+                                BC:4C:3E:42:D4:0B:FC:89:3B:D5:1E:29:E8:38:F7:44:
+                                5B:22:9A:FA:1D:B3:57
+                Signed Certificate Timestamp:
+                    Version   : v1 (0x0)
+                    Log ID    : B7:3E:FB:24:DF:9C:4D:BA:75:F2:39:C5:BA:58:F4:6C:
+                                5D:FC:42:CF:7A:9F:35:C4:9E:1D:09:81:25:ED:B4:99
+                    Timestamp : May  5 16:12:54.779 2022 GMT
+                    Extensions: none
+                    Signature : ecdsa-with-SHA256
+                                30:45:02:20:2F:72:9B:CC:88:04:F1:3B:8B:BC:01:85:
+                                B2:16:B4:AF:4A:CB:45:E8:0B:29:D1:77:6C:2C:56:0C:
+                                8D:1C:61:7C:02:21:00:A4:67:AC:08:40:83:82:9E:22:
+                                75:3A:92:91:1E:12:23:01:B9:04:3B:A3:60:5F:E8:D1:
+                                59:4E:88:DB:C5:DE:DD
     Signature Algorithm: sha256WithRSAEncryption
-         86:c9:91:34:56:55:a8:d6:f3:09:de:f1:a4:da:a7:71:19:95:
-         a0:3f:49:47:22:f0:fb:09:27:29:30:54:98:12:ff:01:33:e3:
-         3d:72:e0:41:56:8c:51:70:b8:d0:26:b5:80:b4:f7:35:e1:e0:
-         6e:92:9b:74:ed:89:7e:fd:99:fc:0c:9d:4e:79:7b:e7:21:6e:
-         89:e9:f8:18:4f:c2:9a:ac:5b:04:8e:94:a3:95:2d:80:53:89:
-         8f:62:34:cb:e3:55:59:57:57:8f:a2:8e:7d:08:bb:17:46:15:
-         cd:8c:03:47:5b:b5:b1:13:6e:c7:19:7e:e7:bf:9d:b8:b3:23:
-         03:b3:62:69:2b:f3:92:f1:ae:a7:ec:70:48:22:bb:9a:09:df:
-         6a:7b:1d:3f:85:51:bd:ef:ae:2b:9f:e6:4f:c8:bd:10:1e:45:
-         ea:f0:72:7c:6b:e1:54:ff:80:d2:90:59:8a:66:ef:43:8a:ef:
-         ea:2e:32:6b:32:01:b0:14:29:58:7f:4c:69:aa:b9:d9:14:a0:
-         9d:bb:7b:6a:2d:ff:2a:3d:24:b4:be:8c:c2:59:fa:1d:8f:26:
-         ee:ff:c5:5c:db:2c:38:d1:8a:5e:c0:9d:66:8e:be:7e:60:a7:
-         a3:3a:e5:e5:9f:83:ff:57:ca:5a:7f:f9:56:d5:a7:24:5a:56:
-         d9:bc:54:72
+    Signature Value:
+        33:bb:fa:5f:59:e5:d0:5c:a1:22:4e:73:c8:35:e4:d7:8c:28:
+        67:b2:85:b0:1b:0c:e4:ec:aa:a7:49:09:e7:52:63:e5:8a:51:
+        a9:de:b8:35:74:66:0f:66:fa:b4:91:1f:b0:3a:5e:0a:21:0d:
+        a2:73:5b:1f:2c:fa:cd:59:72:85:8c:db:95:33:66:64:a2:e7:
+        6f:0d:9e:cf:a7:e3:de:82:7a:24:55:56:f8:b8:c0:95:0d:ba:
+        07:01:fe:ce:35:48:2f:23:2d:29:7b:6b:00:e6:f7:2c:31:6f:
+        9c:67:35:90:f0:65:9f:41:f9:bf:ad:2c:e9:8e:f0:c4:cf:8c:
+        5d:02:c4:8e:22:7f:62:bb:62:21:cf:9d:59:7b:96:4e:c4:7d:
+        ca:a2:6f:37:66:34:88:ac:a3:c1:6e:95:ec:e3:3a:07:27:6d:
+        31:b7:38:70:ce:93:42:86:20:3b:f8:d8:f9:ef:a9:9e:43:4f:
+        ed:9b:4b:c7:90:5b:d1:9b:16:66:8f:42:11:8a:97:bb:c7:e1:
+        b5:67:f5:a1:f4:7b:8b:f0:88:a8:5f:39:83:4c:2e:3d:e9:8f:
+        34:b8:fb:e8:1e:e2:0f:90:02:7c:ad:c7:9e:00:c2:fa:0a:41:
+        43:61:e2:2b:6d:f8:b7:fa:70:71:04:f3:2c:7f:c0:16:7a:6b:
+        a1:34:45:c0
+
 -----BEGIN CERTIFICATE-----
-MIIGdTCCBV2gAwIBAgISA7Cu6cPrAEhdZ8i/u+5LttYYMA0GCSqGSIb3DQEBCwUA
-MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
-EwJSMzAeFw0yMTA1MDUxOTM2MTVaFw0yMTA4MDMxOTM2MTVaMB4xHDAaBgNVBAMM
-EyouemJteDEubW9uZ29kYi5uZXQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
-AoICAQCkqYRXe29M/h+eiRSQDlaSAFFZHVkBimkLQeRzj8wh7lKgnP5HIL5Y5M6L
-Fjg5SGaG/msu1xGwlXhPEcZrKvKaN3gf8Uc5zG7LjLN67It6r8UVq8/olj9j6b9Y
-H8uWtjxJxQbDbsJzi/F2Hum4Uuhf/eIihAqknQl646vFpSHM6EAlod/5UkQKks97
-cm1034NiC4Nrz+iuke8ie23z+nDensuD2T0cVIQUagZbTfSVQPwZk1zAwS+GFrCE
-t+Qmk5s6q5jDy/vu3fgmf2yuetJl3WizUVm8wTsjE5trUOWHxVwHe8vGuRd8I6p3
-SV7Bk1p9/q/jPFMNYXyy58R+j8tt0lUjS9BD9SBRWBXIDMwwSC0BS+nUxsotAHQF
-tIw6az/bejOWFyiHVg2hHERgmq40KmHu4kKzi4n/XfoZXbcf2w1EkoCD3+ARiHya
-lvh/W8tq6kTmLDMK7zLXUgC2MIZD12CLMwpsQ5zpe3OL+pefI9SakKWSJW0Dtg4z
-MF+sBAtMz6uCBFYh8HoZVbVjAzX5oIQmc81OmsM0vJ6cYShv+xu4oo5K+LXyAz/N
-9ixwv0v5DWpMh75YTfq6M/wp4ylus9+7TedGk9aqQLI/z11GXYsX7wUnI5i321lz
-L9J9v/L/Z/5VBfJP59DkQz1WAyYlkPIoTCGhKOqSsKG2nHN0mwIDAQABo4IClzCC
-ApMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
-AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRRCAM5K7dBPiNiuYimY1f4RPryTjAf
-BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
-IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
-aHR0cDovL3IzLmkubGVuY3Iub3JnLzBmBgNVHREEXzBdgiwqLmUxMGNiOTNhOWNl
-Yzc0Njg5ZDg4ZmUxZC56Ym14MS5tb25nb2RiLm5ldIIYKi56Ym14MS5tZXNoLm1v
-bmdvZGIubmV0ghMqLnpibXgxLm1vbmdvZGIubmV0MEwGA1UdIARFMEMwCAYGZ4EM
-AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
-c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAlCC8Ho7VjWyI
-cx+CiyIsDdHaTV5sT5Q9YdtOL1hNosIAAAF5Pj7S0wAABAMASDBGAiEA6dMA4pCH
-RFrXEFNl9ODjPNPHdWmzvlPzACRYwp031oECIQC5T1QA/3aQ62l89NcjWikm8CYu
-O9JyHYIh75MB4wi7MAB2AH0+8viP/4hVaCTCwMqeUol5K8UOeAl/LmqXaJl+IvDX
-AAABeT4+0w0AAAQDAEcwRQIgPalFNXBxGEW4FVNgQh1uUPTcaKLQRQNmOo63WPyt
-4kUCIQD6eZG/T/pFdpDVYdgzl3GqFkwOohkUn2n+uAChIyKGATANBgkqhkiG9w0B
-AQsFAAOCAQEAhsmRNFZVqNbzCd7xpNqncRmVoD9JRyLw+wknKTBUmBL/ATPjPXLg
-QVaMUXC40Ca1gLT3NeHgbpKbdO2Jfv2Z/AydTnl75yFuien4GE/CmqxbBI6Uo5Ut
-gFOJj2I0y+NVWVdXj6KOfQi7F0YVzYwDR1u1sRNuxxl+57+duLMjA7NiaSvzkvGu
-p+xwSCK7mgnfansdP4VRve+uK5/mT8i9EB5F6vByfGvhVP+A0pBZimbvQ4rv6i4y
-azIBsBQpWH9Maaq52RSgnbt7ai3/Kj0ktL6Mwln6HY8m7v/FXNssONGKXsCdZo6+
-fmCnozrl5Z+D/1fKWn/5VtWnJFpW2bxUcg==
------END CERTIFICATE-----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+-----END CERTIFICATE-----

data/spec/support/certificates/retrieve-atlas-cert

@@ -0,0 +1,38 @@
+#!/usr/bin/env ruby
+
+require 'tmpdir'
+
+host = 'freecluster-shard-00-00-oztdp.mongodb-dev.net'
+
+output = `openssl s_client -showcerts -servername #{host} -connect #{host}:27017 </dev/null`
+
+if output.empty?
+  raise 'Something bad happened'
+end
+
+certs = output.scan(/(-----BEGIN CERTIFICATE(.|\n)+?END CERTIFICATE-----)/)
+cert, ca_cert = certs.map { |g| g.first }
+
+Dir.mktmpdir do |path|
+  cert_path = File.join(path, 'cert.pem')
+  File.open(cert_path, 'w') do |f|
+    f << cert
+  end
+  output = `openssl x509 -noout -text -in #{cert_path}`
+  File.open('atlas-ocsp.crt', 'w') do |f|
+    f << output
+    f << "\n"
+    f << cert
+  end
+
+  cert_path = File.join(path, 'cert.pem')
+  File.open(cert_path, 'w') do |f|
+    f << ca_cert
+  end
+  output = `openssl x509 -noout -text -in #{cert_path}`
+  File.open('atlas-ocsp-ca.crt', 'w') do |f|
+    f << output
+    f << "\n"
+    f << ca_cert
+  end
+end

data/spec/support/cluster_tools.rb

@@ -55,7 +55,7 @@ class ClusterTools
       replSetStepDown: 1, force: true)
   end
 
-  # https://docs.mongodb.com/manual/reference/parameters/#param.enableElectionHandoff
+  # https://mongodb.com/docs/manual/reference/parameters/#param.enableElectionHandoff
   def set_election_handoff(value)
     unless [true, false].include?(value)
       raise ArgumentError, 'Value must be true or false'

data/spec/support/common_shortcuts.rb

@@ -246,9 +246,8 @@ module CommonShortcuts
       # must be closed in the scope of the example.
       register_server(server)
       description = Mongo::Server::Description.new(
-        address,
-        config,
-        average_round_trip_time,
+        address, config,
+        average_round_trip_time: average_round_trip_time,
       )
       server.tap do |s|
         allow(s).to receive(:description).and_return(description)
@@ -371,5 +370,27 @@ module CommonShortcuts
         thread.join
       end
     end
+
+    # Wait for snapshot reads to become available to prevent this error:
+    # [246:SnapshotUnavailable]: Unable to read from a snapshot due to pending collection catalog changes; please retry the operation. Snapshot timestamp is Timestamp(1646666892, 4). Collection minimum is Timestamp(1646666892, 5) (on localhost:27017, modern retry, attempt 1)
+    def wait_for_snapshot(db: nil, collection: nil, client: nil)
+      client ||= authorized_client
+      client = client.use(db) if db
+      collection ||= 'any'
+      start_time = Mongo::Utils.monotonic_time
+      begin
+        client.start_session(snapshot: true) do |session|
+          client[collection].aggregate([{'$match': {any: true}}], session: session).to_a
+        end
+      rescue Mongo::Error::OperationFailure => e
+        # Retry them as the server demands...
+        if e.code == 246 # SnapshotUnavailable
+          if Mongo::Utils.monotonic_time < start_time + 10
+            retry
+          end
+        end
+        raise
+      end
+    end
   end
 end