mongo 2.18.0.beta1 → 2.18.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- checksums.yaml.gz.sig +0 -0
- data/lib/mongo/bulk_write.rb +8 -2
- data/lib/mongo/client.rb +19 -5
- data/lib/mongo/client_encryption.rb +86 -4
- data/lib/mongo/cluster.rb +6 -4
- data/lib/mongo/collection/view/aggregation.rb +3 -0
- data/lib/mongo/collection/view/change_stream.rb +9 -0
- data/lib/mongo/collection/view/iterable.rb +1 -0
- data/lib/mongo/collection/view/readable.rb +11 -3
- data/lib/mongo/collection.rb +9 -1
- data/lib/mongo/config.rb +11 -0
- data/lib/mongo/crypt/auto_encrypter.rb +49 -21
- data/lib/mongo/crypt/binding.rb +73 -48
- data/lib/mongo/crypt/data_key_context.rb +6 -1
- data/lib/mongo/crypt/encryption_io.rb +66 -0
- data/lib/mongo/crypt/explicit_encrypter.rb +116 -5
- data/lib/mongo/crypt/explicit_encryption_context.rb +3 -8
- data/lib/mongo/crypt/handle.rb +26 -8
- data/lib/mongo/crypt/kms/aws.rb +11 -3
- data/lib/mongo/crypt/kms/azure.rb +14 -6
- data/lib/mongo/crypt/kms/gcp.rb +12 -5
- data/lib/mongo/crypt/kms/kmip.rb +15 -9
- data/lib/mongo/crypt/kms/local.rb +9 -1
- data/lib/mongo/crypt/kms/master_key_document.rb +1 -1
- data/lib/mongo/crypt/rewrap_many_data_key_context.rb +46 -0
- data/lib/mongo/crypt/rewrap_many_data_key_result.rb +37 -0
- data/lib/mongo/crypt/status.rb +8 -2
- data/lib/mongo/crypt.rb +2 -0
- data/lib/mongo/database.rb +10 -27
- data/lib/mongo/error/missing_file_chunk.rb +8 -2
- data/lib/mongo/grid/stream/read.rb +6 -0
- data/lib/mongo/index/view.rb +1 -0
- data/lib/mongo/operation/create/op_msg.rb +1 -13
- data/lib/mongo/operation/distinct/op_msg.rb +4 -1
- data/lib/mongo/protocol/msg.rb +0 -16
- data/lib/mongo/server/connection_pool.rb +5 -4
- data/lib/mongo/server/monitor/connection.rb +10 -4
- data/lib/mongo/server/monitor.rb +4 -0
- data/lib/mongo/server/push_monitor.rb +4 -0
- data/lib/mongo/version.rb +1 -1
- data/lib/mongo.rb +2 -0
- data/spec/README.md +14 -0
- data/spec/integration/change_stream_spec.rb +1 -1
- data/spec/integration/client_construction_spec.rb +73 -7
- data/spec/integration/client_side_encryption/auto_encryption_command_monitoring_spec.rb +165 -164
- data/spec/integration/client_side_encryption/decryption_events_prose_spec.rb +158 -0
- data/spec/integration/client_side_encryption/explicit_queryable_encryption_spec.rb +5 -5
- data/spec/integration/client_side_encryption/kms_tls_options_spec.rb +50 -8
- data/spec/integration/client_side_encryption/unique_index_on_key_alt_names_prose_spec.rb +85 -0
- data/spec/integration/ocsp_verifier_spec.rb +1 -1
- data/spec/integration/reconnect_spec.rb +2 -0
- data/spec/integration/sdam_events_spec.rb +40 -0
- data/spec/integration/srv_monitoring_spec.rb +1 -0
- data/spec/integration/srv_spec.rb +1 -0
- data/spec/lite_spec_helper.rb +5 -4
- data/spec/mongo/bulk_write_spec.rb +13 -0
- data/spec/mongo/client_construction_spec.rb +45 -2
- data/spec/mongo/client_encryption_spec.rb +0 -12
- data/spec/mongo/client_spec.rb +1 -1
- data/spec/mongo/collection/view/aggregation_spec.rb +119 -0
- data/spec/mongo/collection/view/readable_spec.rb +630 -5
- data/spec/mongo/collection_spec.rb +32 -0
- data/spec/mongo/crypt/auto_encrypter_spec.rb +110 -0
- data/spec/mongo/crypt/binding/context_spec.rb +3 -35
- data/spec/mongo/crypt/data_key_context_spec.rb +1 -1
- data/spec/mongo/crypt/explicit_encryption_context_spec.rb +8 -3
- data/spec/mongo/crypt/handle_spec.rb +39 -3
- data/spec/mongo/crypt/kms/credentials_spec.rb +0 -47
- data/spec/mongo/index/view_spec.rb +56 -0
- data/spec/mongo/operation/create/op_msg_spec.rb +0 -42
- data/spec/mongo/server/connection_pool_spec.rb +26 -4
- data/spec/mongo/socket/ssl_spec.rb +3 -3
- data/spec/runners/crud/requirement.rb +6 -1
- data/spec/runners/crud/test.rb +1 -1
- data/spec/runners/transactions/spec.rb +2 -2
- data/spec/runners/transactions/test.rb +4 -20
- data/spec/runners/transactions.rb +2 -2
- data/spec/runners/unified/assertions.rb +32 -2
- data/spec/runners/unified/change_stream_operations.rb +3 -0
- data/spec/runners/unified/client_side_encryption_operations.rb +83 -0
- data/spec/runners/unified/crud_operations.rb +17 -2
- data/spec/runners/unified/ddl_operations.rb +27 -2
- data/spec/runners/unified/grid_fs_operations.rb +21 -0
- data/spec/runners/unified/test.rb +59 -1
- data/spec/shared/lib/mrss/docker_runner.rb +2 -0
- data/spec/shared/lib/mrss/eg_config_utils.rb +51 -0
- data/spec/shared/lib/mrss/lite_constraints.rb +10 -2
- data/spec/shared/shlib/set_env.sh +3 -0
- data/spec/solo/clean_exit_spec.rb +5 -0
- data/spec/spec_tests/client_side_encryption_spec.rb +1 -1
- data/spec/spec_tests/client_side_encryption_unified_spec.rb +16 -0
- data/spec/spec_tests/data/change_streams_unified/change-streams-showExpandedEvents.yml +298 -0
- data/spec/spec_tests/data/client_side_encryption/create-and-createIndexes.yml +58 -0
- data/spec/spec_tests/data/client_side_encryption/fle2-Delete.yml +1 -1
- data/spec/spec_tests/data/client_side_encryption/fle2-EncryptedFields-vs-jsonSchema.yml +1 -1
- data/spec/spec_tests/data/client_side_encryption/fle2-FindOneAndUpdate.yml +2 -2
- data/spec/spec_tests/data/client_side_encryption/fle2-InsertFind-Indexed.yml +1 -1
- data/spec/spec_tests/data/client_side_encryption/fle2-Update.yml +2 -2
- data/spec/spec_tests/data/client_side_encryption/unified/addKeyAltName.yml +194 -0
- data/spec/spec_tests/data/client_side_encryption/unified/createDataKey-kms_providers-invalid.yml +67 -0
- data/spec/spec_tests/data/client_side_encryption/unified/createDataKey.yml +309 -0
- data/spec/spec_tests/data/client_side_encryption/unified/deleteKey.yml +159 -0
- data/spec/spec_tests/data/client_side_encryption/unified/getKey.yml +105 -0
- data/spec/spec_tests/data/client_side_encryption/unified/getKeyByAltName.yml +104 -0
- data/spec/spec_tests/data/client_side_encryption/unified/getKeys.yml +122 -0
- data/spec/spec_tests/data/client_side_encryption/unified/removeKeyAltName.yml +157 -0
- data/spec/spec_tests/data/client_side_encryption/unified/rewrapManyDataKey-decrypt_failure.yml +69 -0
- data/spec/spec_tests/data/client_side_encryption/unified/rewrapManyDataKey-encrypt_failure.yml +122 -0
- data/spec/spec_tests/data/client_side_encryption/unified/rewrapManyDataKey.yml +432 -0
- data/spec/spec_tests/data/client_side_encryption/validatorAndPartialFieldExpression.yml +166 -0
- data/spec/spec_tests/data/command_monitoring_unified/bulkWrite.yml +68 -0
- data/spec/spec_tests/data/command_monitoring_unified/command.yml +50 -0
- data/spec/spec_tests/data/command_monitoring_unified/deleteMany.yml +79 -0
- data/spec/spec_tests/data/command_monitoring_unified/deleteOne.yml +79 -0
- data/spec/spec_tests/data/command_monitoring_unified/find.yml +254 -0
- data/spec/spec_tests/data/command_monitoring_unified/insertMany.yml +79 -0
- data/spec/spec_tests/data/command_monitoring_unified/insertOne.yml +77 -0
- data/spec/spec_tests/data/command_monitoring_unified/unacknowledgedBulkWrite.yml +55 -0
- data/spec/spec_tests/data/command_monitoring_unified/updateMany.yml +87 -0
- data/spec/spec_tests/data/command_monitoring_unified/updateOne.yml +118 -0
- data/spec/spec_tests/data/crud_unified/distinct-comment.yml +98 -0
- data/spec/spec_tests/data/gridfs_unified/delete.yml +198 -0
- data/spec/spec_tests/data/gridfs_unified/download.yml +241 -0
- data/spec/spec_tests/data/gridfs_unified/downloadByName.yml +159 -0
- data/spec/spec_tests/data/gridfs_unified/upload-disableMD5.yml +92 -0
- data/spec/spec_tests/data/gridfs_unified/upload.yml +288 -0
- data/spec/spec_tests/gridfs_unified_spec.rb +13 -0
- data/spec/stress/connection_pool_timing_spec.rb +2 -2
- data/spec/support/background_thread_registry.rb +3 -13
- data/spec/support/certificates/atlas-ocsp-ca.crt +40 -47
- data/spec/support/certificates/atlas-ocsp.crt +101 -106
- data/spec/support/crypt.rb +57 -13
- data/spec/support/macros.rb +10 -0
- data/spec/support/spec_config.rb +4 -0
- data.tar.gz.sig +0 -0
- metadata +1271 -1219
- metadata.gz.sig +0 -0
- data/spec/spec_tests/command_monitoring_spec.rb +0 -71
- data/spec/spec_tests/data/command_monitoring/bulkWrite.yml +0 -49
- data/spec/spec_tests/data/command_monitoring/command.yml +0 -61
- data/spec/spec_tests/data/command_monitoring/deleteMany.yml +0 -55
- data/spec/spec_tests/data/command_monitoring/deleteOne.yml +0 -55
- data/spec/spec_tests/data/command_monitoring/find.yml +0 -266
- data/spec/spec_tests/data/command_monitoring/insertMany.yml +0 -75
- data/spec/spec_tests/data/command_monitoring/insertOne.yml +0 -51
- data/spec/spec_tests/data/command_monitoring/unacknowledgedBulkWrite.yml +0 -34
- data/spec/spec_tests/data/command_monitoring/updateMany.yml +0 -65
- data/spec/spec_tests/data/command_monitoring/updateOne.yml +0 -90
@@ -2,42 +2,41 @@ Certificate:
|
|
2
2
|
Data:
|
3
3
|
Version: 3 (0x2)
|
4
4
|
Serial Number:
|
5
|
-
|
5
|
+
0e:fb:8b:f4:73:3e:98:df:1d:48:6d:da:d2:08:ca:0d
|
6
6
|
Signature Algorithm: sha256WithRSAEncryption
|
7
7
|
Issuer: C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
|
8
8
|
Validity
|
9
|
-
Not Before:
|
10
|
-
Not After :
|
9
|
+
Not Before: May 5 00:00:00 2022 GMT
|
10
|
+
Not After : Jun 2 23:59:59 2023 GMT
|
11
11
|
Subject: C = US, ST = New York, L = New York, O = "MongoDB, Inc.", CN = *.mongodb-dev.net
|
12
12
|
Subject Public Key Info:
|
13
13
|
Public Key Algorithm: rsaEncryption
|
14
|
-
|
14
|
+
Public-Key: (2048 bit)
|
15
15
|
Modulus:
|
16
|
-
00:
|
17
|
-
|
18
|
-
|
19
|
-
|
20
|
-
|
21
|
-
|
22
|
-
|
23
|
-
|
24
|
-
|
25
|
-
|
26
|
-
|
27
|
-
|
28
|
-
|
29
|
-
|
30
|
-
|
31
|
-
|
32
|
-
|
33
|
-
|
16
|
+
00:b3:40:eb:4a:26:af:07:a3:ea:58:c7:3b:50:5c:
|
17
|
+
94:47:5a:0a:9d:86:b7:bb:03:9c:5a:4a:23:5e:7c:
|
18
|
+
b1:cd:fc:4f:56:d5:05:4e:ce:f8:f2:b1:55:09:13:
|
19
|
+
ff:cc:e6:a4:fb:41:2e:0c:8f:1a:a3:ea:4b:a3:51:
|
20
|
+
c6:f7:91:e6:47:49:ae:3b:94:df:68:80:68:2a:62:
|
21
|
+
a2:d1:42:5b:89:c1:70:2b:1c:a7:84:df:98:86:1a:
|
22
|
+
69:eb:88:c4:51:4d:c9:7f:10:90:a0:0a:c5:7c:07:
|
23
|
+
12:9e:c2:94:e1:88:2e:2d:21:94:a4:8a:27:1f:20:
|
24
|
+
1b:6f:14:27:21:0c:4b:6f:72:5b:18:e7:75:7a:90:
|
25
|
+
4c:a8:18:e7:4d:0f:ed:e4:03:f4:10:b7:65:23:9f:
|
26
|
+
b2:5f:0d:eb:85:3c:b0:34:d3:9a:2c:80:85:2e:53:
|
27
|
+
35:19:44:03:13:b3:df:fb:0d:db:80:6f:12:60:1a:
|
28
|
+
b8:d6:25:0d:6d:23:fd:a6:d8:aa:dc:82:73:cc:d2:
|
29
|
+
26:9b:71:50:9a:09:cf:ef:60:ba:d1:22:cb:fb:2f:
|
30
|
+
69:a2:a6:c6:a9:30:77:1c:d7:bc:c2:6e:6d:e6:69:
|
31
|
+
65:f3:91:3d:ee:04:f9:a0:41:5f:50:dc:75:15:4d:
|
32
|
+
15:43:76:35:e9:97:65:7a:d8:3f:00:4d:44:29:7c:
|
33
|
+
5d:25
|
34
34
|
Exponent: 65537 (0x10001)
|
35
35
|
X509v3 extensions:
|
36
36
|
X509v3 Authority Key Identifier:
|
37
|
-
|
38
|
-
|
37
|
+
B7:6B:A2:EA:A8:AA:84:8C:79:EA:B4:DA:0F:98:B2:C5:95:76:B9:F4
|
39
38
|
X509v3 Subject Key Identifier:
|
40
|
-
|
39
|
+
22:7C:2F:C7:F4:D6:75:0E:A1:02:32:21:1A:A6:29:25:46:48:B8:6A
|
41
40
|
X509v3 Subject Alternative Name:
|
42
41
|
DNS:*.mongodb-dev.net, DNS:mongodb-dev.net
|
43
42
|
X509v3 Key Usage: critical
|
@@ -45,113 +44,109 @@ Certificate:
|
|
45
44
|
X509v3 Extended Key Usage:
|
46
45
|
TLS Web Server Authentication, TLS Web Client Authentication
|
47
46
|
X509v3 CRL Distribution Points:
|
48
|
-
|
49
47
|
Full Name:
|
50
|
-
URI:http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
|
51
|
-
|
48
|
+
URI:http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
|
52
49
|
Full Name:
|
53
|
-
URI:http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
|
54
|
-
|
50
|
+
URI:http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
|
55
51
|
X509v3 Certificate Policies:
|
56
52
|
Policy: 2.23.140.1.2.2
|
57
53
|
CPS: http://www.digicert.com/CPS
|
58
|
-
|
59
54
|
Authority Information Access:
|
60
55
|
OCSP - URI:http://ocsp.digicert.com
|
61
|
-
CA Issuers - URI:http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt
|
62
|
-
|
63
|
-
X509v3 Basic Constraints: critical
|
56
|
+
CA Issuers - URI:http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
|
57
|
+
X509v3 Basic Constraints:
|
64
58
|
CA:FALSE
|
65
59
|
CT Precertificate SCTs:
|
66
60
|
Signed Certificate Timestamp:
|
67
61
|
Version : v1 (0x0)
|
68
|
-
Log ID :
|
69
|
-
|
70
|
-
Timestamp :
|
62
|
+
Log ID : E8:3E:D0:DA:3E:F5:06:35:32:E7:57:28:BC:89:6B:C9:
|
63
|
+
03:D3:CB:D1:11:6B:EC:EB:69:E1:77:7D:6D:06:BD:6E
|
64
|
+
Timestamp : May 5 16:12:54.726 2022 GMT
|
71
65
|
Extensions: none
|
72
66
|
Signature : ecdsa-with-SHA256
|
73
|
-
30:45:02:
|
74
|
-
|
75
|
-
|
76
|
-
|
77
|
-
|
67
|
+
30:45:02:21:00:C4:D8:1A:00:3C:BD:E5:E1:13:B2:5D:
|
68
|
+
DA:7F:69:A9:4C:83:AB:CC:C2:00:9F:FB:98:09:44:5F:
|
69
|
+
93:0C:92:CD:F7:02:20:2D:E2:D6:A4:3B:61:06:25:1E:
|
70
|
+
22:2F:5E:2A:D4:76:0D:FE:12:E9:91:65:26:69:25:6C:
|
71
|
+
53:E4:C3:2F:4B:89:AF
|
78
72
|
Signed Certificate Timestamp:
|
79
73
|
Version : v1 (0x0)
|
80
|
-
Log ID :
|
81
|
-
|
82
|
-
Timestamp :
|
74
|
+
Log ID : 35:CF:19:1B:BF:B1:6C:57:BF:0F:AD:4C:6D:42:CB:BB:
|
75
|
+
B6:27:20:26:51:EA:3F:E1:2A:EF:A8:03:C3:3B:D6:4C
|
76
|
+
Timestamp : May 5 16:12:54.786 2022 GMT
|
83
77
|
Extensions: none
|
84
78
|
Signature : ecdsa-with-SHA256
|
85
|
-
30:
|
86
|
-
|
87
|
-
|
88
|
-
|
89
|
-
|
79
|
+
30:45:02:20:46:F0:9E:AE:32:A7:A7:CA:22:C6:64:EE:
|
80
|
+
7F:9F:C6:EA:3C:BE:3B:2F:E2:09:C0:ED:A9:E1:EE:16:
|
81
|
+
F9:F1:6C:1E:02:21:00:BD:1A:42:73:A5:CE:E6:8A:CE:
|
82
|
+
BC:4C:3E:42:D4:0B:FC:89:3B:D5:1E:29:E8:38:F7:44:
|
83
|
+
5B:22:9A:FA:1D:B3:57
|
90
84
|
Signed Certificate Timestamp:
|
91
85
|
Version : v1 (0x0)
|
92
|
-
Log ID :
|
93
|
-
|
94
|
-
Timestamp :
|
86
|
+
Log ID : B7:3E:FB:24:DF:9C:4D:BA:75:F2:39:C5:BA:58:F4:6C:
|
87
|
+
5D:FC:42:CF:7A:9F:35:C4:9E:1D:09:81:25:ED:B4:99
|
88
|
+
Timestamp : May 5 16:12:54.779 2022 GMT
|
95
89
|
Extensions: none
|
96
90
|
Signature : ecdsa-with-SHA256
|
97
|
-
30:
|
98
|
-
|
99
|
-
|
100
|
-
|
101
|
-
|
91
|
+
30:45:02:20:2F:72:9B:CC:88:04:F1:3B:8B:BC:01:85:
|
92
|
+
B2:16:B4:AF:4A:CB:45:E8:0B:29:D1:77:6C:2C:56:0C:
|
93
|
+
8D:1C:61:7C:02:21:00:A4:67:AC:08:40:83:82:9E:22:
|
94
|
+
75:3A:92:91:1E:12:23:01:B9:04:3B:A3:60:5F:E8:D1:
|
95
|
+
59:4E:88:DB:C5:DE:DD
|
102
96
|
Signature Algorithm: sha256WithRSAEncryption
|
103
|
-
|
104
|
-
|
105
|
-
|
106
|
-
|
107
|
-
|
108
|
-
|
109
|
-
|
110
|
-
|
111
|
-
|
112
|
-
|
113
|
-
|
114
|
-
|
115
|
-
|
116
|
-
|
117
|
-
|
97
|
+
Signature Value:
|
98
|
+
33:bb:fa:5f:59:e5:d0:5c:a1:22:4e:73:c8:35:e4:d7:8c:28:
|
99
|
+
67:b2:85:b0:1b:0c:e4:ec:aa:a7:49:09:e7:52:63:e5:8a:51:
|
100
|
+
a9:de:b8:35:74:66:0f:66:fa:b4:91:1f:b0:3a:5e:0a:21:0d:
|
101
|
+
a2:73:5b:1f:2c:fa:cd:59:72:85:8c:db:95:33:66:64:a2:e7:
|
102
|
+
6f:0d:9e:cf:a7:e3:de:82:7a:24:55:56:f8:b8:c0:95:0d:ba:
|
103
|
+
07:01:fe:ce:35:48:2f:23:2d:29:7b:6b:00:e6:f7:2c:31:6f:
|
104
|
+
9c:67:35:90:f0:65:9f:41:f9:bf:ad:2c:e9:8e:f0:c4:cf:8c:
|
105
|
+
5d:02:c4:8e:22:7f:62:bb:62:21:cf:9d:59:7b:96:4e:c4:7d:
|
106
|
+
ca:a2:6f:37:66:34:88:ac:a3:c1:6e:95:ec:e3:3a:07:27:6d:
|
107
|
+
31:b7:38:70:ce:93:42:86:20:3b:f8:d8:f9:ef:a9:9e:43:4f:
|
108
|
+
ed:9b:4b:c7:90:5b:d1:9b:16:66:8f:42:11:8a:97:bb:c7:e1:
|
109
|
+
b5:67:f5:a1:f4:7b:8b:f0:88:a8:5f:39:83:4c:2e:3d:e9:8f:
|
110
|
+
34:b8:fb:e8:1e:e2:0f:90:02:7c:ad:c7:9e:00:c2:fa:0a:41:
|
111
|
+
43:61:e2:2b:6d:f8:b7:fa:70:71:04:f3:2c:7f:c0:16:7a:6b:
|
112
|
+
a1:34:45:c0
|
118
113
|
|
119
114
|
-----BEGIN CERTIFICATE-----
|
120
|
-
|
115
|
+
MIIGxDCCBaygAwIBAgIQDvuL9HM+mN8dSG3a0gjKDTANBgkqhkiG9w0BAQsFADBP
|
121
116
|
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
|
122
|
-
|
123
|
-
|
117
|
+
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA1MDUwMDAwMDBa
|
118
|
+
Fw0yMzA2MDIyMzU5NTlaMGcxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9y
|
124
119
|
azERMA8GA1UEBxMITmV3IFlvcmsxFjAUBgNVBAoTDU1vbmdvREIsIEluYy4xGjAY
|
125
120
|
BgNVBAMMESoubW9uZ29kYi1kZXYubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
|
126
|
-
|
127
|
-
|
128
|
-
|
129
|
-
|
130
|
-
|
131
|
-
|
132
|
-
|
133
|
-
|
121
|
+
MIIBCgKCAQEAs0DrSiavB6PqWMc7UFyUR1oKnYa3uwOcWkojXnyxzfxPVtUFTs74
|
122
|
+
8rFVCRP/zOak+0EuDI8ao+pLo1HG95HmR0muO5TfaIBoKmKi0UJbicFwKxynhN+Y
|
123
|
+
hhpp64jEUU3JfxCQoArFfAcSnsKU4YguLSGUpIonHyAbbxQnIQxLb3JbGOd1epBM
|
124
|
+
qBjnTQ/t5AP0ELdlI5+yXw3rhTywNNOaLICFLlM1GUQDE7Pf+w3bgG8SYBq41iUN
|
125
|
+
bSP9ptiq3IJzzNImm3FQmgnP72C60SLL+y9poqbGqTB3HNe8wm5t5mll85E97gT5
|
126
|
+
oEFfUNx1FU0VQ3Y16Zdletg/AE1EKXxdJQIDAQABo4IDgjCCA34wHwYDVR0jBBgw
|
127
|
+
FoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFCJ8L8f01nUOoQIyIRqm
|
128
|
+
KSVGSLhqMC0GA1UdEQQmMCSCESoubW9uZ29kYi1kZXYubmV0gg9tb25nb2RiLWRl
|
134
129
|
di5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
|
135
|
-
|
136
|
-
|
137
|
-
|
138
|
-
|
139
|
-
|
140
|
-
|
141
|
-
|
142
|
-
|
143
|
-
|
144
|
-
|
145
|
-
|
146
|
-
|
147
|
-
+
|
148
|
-
|
149
|
-
|
150
|
-
|
151
|
-
|
152
|
-
/
|
153
|
-
|
154
|
-
|
155
|
-
|
156
|
-
|
130
|
+
BQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5j
|
131
|
+
b20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRw
|
132
|
+
Oi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0Ex
|
133
|
+
LTQuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6
|
134
|
+
Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB/BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUH
|
135
|
+
MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0cDov
|
136
|
+
L2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENB
|
137
|
+
MS0xLmNydDAJBgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDo
|
138
|
+
PtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYCU/uZGAAAEAwBHMEUC
|
139
|
+
IQDE2BoAPL3l4ROyXdp/aalMg6vMwgCf+5gJRF+TDJLN9wIgLeLWpDthBiUeIi9e
|
140
|
+
KtR2Df4S6ZFlJmklbFPkwy9Lia8AdgA1zxkbv7FsV78PrUxtQsu7ticgJlHqP+Eq
|
141
|
+
76gDwzvWTAAAAYCU/uaCAAAEAwBHMEUCIEbwnq4yp6fKIsZk7n+fxuo8vjsv4gnA
|
142
|
+
7anh7hb58WweAiEAvRpCc6XO5orOvEw+QtQL/Ik71R4p6Dj3RFsimvods1cAdgC3
|
143
|
+
Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYCU/uZ7AAAEAwBHMEUC
|
144
|
+
IC9ym8yIBPE7i7wBhbIWtK9Ky0XoCynRd2wsVgyNHGF8AiEApGesCECDgp4idTqS
|
145
|
+
kR4SIwG5BDujYF/o0VlOiNvF3t0wDQYJKoZIhvcNAQELBQADggEBADO7+l9Z5dBc
|
146
|
+
oSJOc8g15NeMKGeyhbAbDOTsqqdJCedSY+WKUaneuDV0Zg9m+rSRH7A6XgohDaJz
|
147
|
+
Wx8s+s1ZcoWM25UzZmSi528Nns+n496CeiRVVvi4wJUNugcB/s41SC8jLSl7awDm
|
148
|
+
9ywxb5xnNZDwZZ9B+b+tLOmO8MTPjF0CxI4if2K7YiHPnVl7lk7EfcqibzdmNIis
|
149
|
+
o8FulezjOgcnbTG3OHDOk0KGIDv42PnvqZ5DT+2bS8eQW9GbFmaPQhGKl7vH4bVn
|
150
|
+
9aH0e4vwiKhfOYNMLj3pjzS4++ge4g+QAnytx54AwvoKQUNh4itt+Lf6cHEE8yx/
|
151
|
+
wBZ6a6E0RcA=
|
157
152
|
-----END CERTIFICATE-----
|
data/spec/support/crypt.rb
CHANGED
@@ -16,15 +16,19 @@
|
|
16
16
|
# limitations under the License.
|
17
17
|
|
18
18
|
module Crypt
|
19
|
+
LOCAL_MASTER_KEY_B64 = 'Mng0NCt4ZHVUYUJCa1kxNkVyNUR1QURhZ2h2UzR2d2RrZzh0cFBwM3R6NmdWMDFBMUN3' +
|
20
|
+
'YkQ5aXRRMkhGRGdQV09wOGVNYUMxT2k3NjZKelhaQmRCZGJkTXVyZG9uSjFk'.freeze
|
21
|
+
|
22
|
+
LOCAL_MASTER_KEY = Base64.decode64(LOCAL_MASTER_KEY_B64)
|
23
|
+
|
19
24
|
# For all FLE-related tests
|
20
25
|
shared_context 'define shared FLE helpers' do
|
21
26
|
# 96-byte binary string, base64-encoded local master key
|
22
27
|
let(:local_master_key_b64) do
|
23
|
-
|
24
|
-
"YkQ5aXRRMkhGRGdQV09wOGVNYUMxT2k3NjZKelhaQmRCZGJkTXVyZG9uSjFk"
|
28
|
+
Crypt::LOCAL_MASTER_KEY_B64
|
25
29
|
end
|
26
30
|
|
27
|
-
let(:local_master_key) {
|
31
|
+
let(:local_master_key) { Crypt::LOCAL_MASTER_KEY }
|
28
32
|
|
29
33
|
# Data key id as a binary string
|
30
34
|
let(:key_id) { data_key['_id'] }
|
@@ -128,8 +132,12 @@ module Crypt
|
|
128
132
|
BSON::ExtJSON.parse(File.read('spec/support/crypt/data_keys/key_document_local.json'))
|
129
133
|
end
|
130
134
|
|
135
|
+
let(:schema_map_file_path) do
|
136
|
+
'spec/support/crypt/schema_maps/schema_map_local.json'
|
137
|
+
end
|
138
|
+
|
131
139
|
let(:schema_map) do
|
132
|
-
BSON::ExtJSON.parse(File.read(
|
140
|
+
BSON::ExtJSON.parse(File.read(schema_map_file_path))
|
133
141
|
end
|
134
142
|
let(:data_key_options) { {} }
|
135
143
|
|
@@ -142,8 +150,12 @@ module Crypt
|
|
142
150
|
shared_context 'with local kms_providers and key alt names' do
|
143
151
|
include_context 'with local kms_providers'
|
144
152
|
|
153
|
+
let(:schema_map_file_path) do
|
154
|
+
'spec/support/crypt/schema_maps/schema_map_local_key_alt_names.json'
|
155
|
+
end
|
156
|
+
|
145
157
|
let(:schema_map) do
|
146
|
-
BSON::ExtJSON.parse(File.read(
|
158
|
+
BSON::ExtJSON.parse(File.read(schema_map_file_path))
|
147
159
|
end
|
148
160
|
end
|
149
161
|
|
@@ -174,8 +186,12 @@ module Crypt
|
|
174
186
|
BSON::ExtJSON.parse(File.read('spec/support/crypt/data_keys/key_document_aws.json'))
|
175
187
|
end
|
176
188
|
|
189
|
+
let(:schema_map_file_path) do
|
190
|
+
'spec/support/crypt/schema_maps/schema_map_aws.json'
|
191
|
+
end
|
192
|
+
|
177
193
|
let(:schema_map) do
|
178
|
-
BSON::ExtJSON.parse(File.read(
|
194
|
+
BSON::ExtJSON.parse(File.read(schema_map_file_path))
|
179
195
|
end
|
180
196
|
|
181
197
|
let(:data_key_options) do
|
@@ -202,8 +218,12 @@ module Crypt
|
|
202
218
|
shared_context 'with AWS kms_providers and key alt names' do
|
203
219
|
include_context 'with AWS kms_providers'
|
204
220
|
|
221
|
+
let(:schema_map_file_path) do
|
222
|
+
'spec/support/crypt/schema_maps/schema_map_aws_key_alt_names.json'
|
223
|
+
end
|
224
|
+
|
205
225
|
let(:schema_map) do
|
206
|
-
BSON::ExtJSON.parse(File.read(
|
226
|
+
BSON::ExtJSON.parse(File.read(schema_map_file_path))
|
207
227
|
end
|
208
228
|
end
|
209
229
|
|
@@ -233,8 +253,12 @@ module Crypt
|
|
233
253
|
BSON::ExtJSON.parse(File.read('spec/support/crypt/data_keys/key_document_azure.json'))
|
234
254
|
end
|
235
255
|
|
256
|
+
let(:schema_map_file_path) do
|
257
|
+
'spec/support/crypt/schema_maps/schema_map_azure.json'
|
258
|
+
end
|
259
|
+
|
236
260
|
let(:schema_map) do
|
237
|
-
BSON::ExtJSON.parse(File.read(
|
261
|
+
BSON::ExtJSON.parse(File.read(schema_map_file_path))
|
238
262
|
end
|
239
263
|
|
240
264
|
let(:data_key_options) do
|
@@ -254,8 +278,12 @@ module Crypt
|
|
254
278
|
shared_context 'with Azure kms_providers and key alt names' do
|
255
279
|
include_context 'with Azure kms_providers'
|
256
280
|
|
281
|
+
let(:schema_map_file_path) do
|
282
|
+
'spec/support/crypt/schema_maps/schema_map_azure_key_alt_names.json'
|
283
|
+
end
|
284
|
+
|
257
285
|
let(:schema_map) do
|
258
|
-
BSON::ExtJSON.parse(File.read(
|
286
|
+
BSON::ExtJSON.parse(File.read(schema_map_file_path))
|
259
287
|
end
|
260
288
|
end
|
261
289
|
|
@@ -289,8 +317,12 @@ module Crypt
|
|
289
317
|
BSON::ExtJSON.parse(File.read('spec/support/crypt/data_keys/key_document_gcp.json'))
|
290
318
|
end
|
291
319
|
|
320
|
+
let(:schema_map_file_path) do
|
321
|
+
'spec/support/crypt/schema_maps/schema_map_gcp.json'
|
322
|
+
end
|
323
|
+
|
292
324
|
let(:schema_map) do
|
293
|
-
BSON::ExtJSON.parse(File.read(
|
325
|
+
BSON::ExtJSON.parse(File.read(schema_map_file_path))
|
294
326
|
end
|
295
327
|
|
296
328
|
let(:data_key_options) do
|
@@ -312,8 +344,12 @@ module Crypt
|
|
312
344
|
shared_context 'with GCP kms_providers and key alt names' do
|
313
345
|
include_context 'with GCP kms_providers'
|
314
346
|
|
347
|
+
let(:schema_map_file_path) do
|
348
|
+
'spec/support/crypt/schema_maps/schema_map_gcp_key_alt_names.json'
|
349
|
+
end
|
350
|
+
|
315
351
|
let(:schema_map) do
|
316
|
-
BSON::ExtJSON.parse(File.read(
|
352
|
+
BSON::ExtJSON.parse(File.read(schema_map_file_path))
|
317
353
|
end
|
318
354
|
end
|
319
355
|
|
@@ -331,8 +367,12 @@ module Crypt
|
|
331
367
|
BSON::ExtJSON.parse(File.read('spec/support/crypt/data_keys/key_document_kmip.json'))
|
332
368
|
end
|
333
369
|
|
370
|
+
let(:schema_map_file_path) do
|
371
|
+
'spec/support/crypt/schema_maps/schema_map_kmip.json'
|
372
|
+
end
|
373
|
+
|
334
374
|
let(:schema_map) do
|
335
|
-
BSON::ExtJSON.parse(File.read(
|
375
|
+
BSON::ExtJSON.parse(File.read(schema_map_file_path))
|
336
376
|
end
|
337
377
|
|
338
378
|
let(:data_key_options) do
|
@@ -351,8 +391,12 @@ module Crypt
|
|
351
391
|
shared_context 'with KMIP kms_providers and key alt names' do
|
352
392
|
include_context 'with KMIP kms_providers'
|
353
393
|
|
394
|
+
let(:schema_map_file_path) do
|
395
|
+
'spec/support/crypt/schema_maps/schema_map_kmip_key_alt_names.json'
|
396
|
+
end
|
397
|
+
|
354
398
|
let(:schema_map) do
|
355
|
-
BSON::ExtJSON.parse(File.read(
|
399
|
+
BSON::ExtJSON.parse(File.read(schema_map_file_path))
|
356
400
|
end
|
357
401
|
end
|
358
402
|
end
|
data/spec/support/macros.rb
CHANGED
@@ -14,5 +14,15 @@ module Mongo
|
|
14
14
|
Mongo.send("#{key}=", existing)
|
15
15
|
end
|
16
16
|
end
|
17
|
+
|
18
|
+
def with_config_values(key, *values, &block)
|
19
|
+
values.each do |value|
|
20
|
+
context "when #{key} is #{value}" do
|
21
|
+
config_override key, value
|
22
|
+
|
23
|
+
class_exec(value, &block)
|
24
|
+
end
|
25
|
+
end
|
26
|
+
end
|
17
27
|
end
|
18
28
|
end
|
data/spec/support/spec_config.rb
CHANGED
data.tar.gz.sig
CHANGED
Binary file
|