mongo 2.19.1 → 2.21.0

data/spec/support/certificates/atlas-ocsp.crt

@@ -2,151 +2,146 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            03:a8:39:03:e8:84:cd:24:1c:9c:b1:27:8c:0a:7a:9b
+            03:92:42:45:e6:7a:a2:13:84:ea:7c:7e:ce:da:6e:d4:63:67
         Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1
+        Issuer: C=US, O=Let's Encrypt, CN=R10
         Validity
-            Not Before: Jun  2 00:00:00 2023 GMT
-            Not After : Jun  4 23:59:59 2024 GMT
-        Subject: C = US, ST = New York, L = New York, O = "MongoDB, Inc.", CN = *.mongodb-dev.net
+            Not Before: Aug 20 13:05:04 2024 GMT
+            Not After : Nov 18 13:05:03 2024 GMT
+        Subject: CN=*.g6fyiaq.mongodb-dev.net
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
+                Public-Key: (4096 bit)
                 Modulus:
-                    00:df:91:d8:18:9b:41:9c:83:33:58:e9:c2:42:00:
-                    5a:a5:c0:61:e8:df:39:20:46:33:ae:87:34:c4:13:
-                    89:d2:c9:4c:eb:6f:a5:cd:dc:31:07:b4:cf:53:74:
-                    9b:3c:32:e8:df:4b:64:88:a2:03:87:e9:27:f9:7b:
-                    57:ca:be:7b:51:0f:f2:b1:78:45:0e:5f:06:e9:0a:
-                    c9:fe:67:d0:19:3c:8c:41:01:5f:b7:66:a0:a4:3b:
-                    54:18:c2:5b:5e:b1:d7:9e:6a:78:f3:bd:24:1d:fc:
-                    ce:43:d2:74:60:83:f4:f3:55:a4:dd:82:f0:e9:f1:
-                    3d:ff:d1:b6:32:0f:c8:e4:aa:95:bf:52:33:8f:2f:
-                    be:28:ea:ea:cf:a7:13:65:7e:3c:61:2c:38:a0:95:
-                    45:b8:2d:7e:20:33:38:36:fd:6f:c8:a8:e2:ad:5b:
-                    3c:91:95:d9:ec:0b:08:7d:81:25:0c:b9:40:6b:97:
-                    8a:d1:c4:f9:4d:9b:45:57:03:b9:5c:03:90:d0:68:
-                    29:50:12:87:59:48:f0:19:c3:4d:42:3e:80:c3:4e:
-                    7e:30:e1:bb:fe:f8:30:55:83:15:ca:af:12:13:3a:
-                    da:e9:91:a3:10:6d:fc:b6:64:5d:89:a3:b4:18:9a:
-                    7e:ab:90:dd:11:fa:db:af:98:12:58:3c:8f:47:22:
-                    f2:53
+                    00:c2:ff:e0:09:f7:d1:30:47:e6:a1:c1:92:c2:ba:
+                    cf:de:2c:86:2e:34:3a:63:f4:5a:a9:45:25:89:47:
+                    eb:44:e8:fb:4e:0d:ac:99:5d:f8:42:74:07:a5:95:
+                    ba:81:8b:9f:f1:64:f0:37:4e:e7:f6:59:c3:3a:08:
+                    5b:82:55:cd:ea:81:94:b6:e7:ec:7a:d8:6b:09:41:
+                    40:40:2f:27:b4:0e:09:d8:61:82:dc:b3:43:5b:50:
+                    5d:03:78:08:ed:35:52:e6:3a:9b:ad:de:4f:73:b3:
+                    56:2f:25:0d:e7:0b:61:83:e8:35:fe:73:89:e3:0e:
+                    cb:7d:c1:29:00:d4:e2:a8:c2:9c:5c:b0:fd:4d:be:
+                    1a:86:a7:7f:b3:d3:d9:3b:35:4c:82:b3:8d:55:0a:
+                    9b:77:40:b0:dd:b1:e6:91:f4:91:dc:50:ee:96:92:
+                    cc:af:11:bb:43:0a:a4:2b:5a:00:ab:9c:17:a2:e1:
+                    bf:7c:9e:92:04:01:8f:bf:16:5f:85:9c:e4:5c:37:
+                    97:ff:29:50:18:d7:01:66:c5:bc:51:11:ac:8a:a3:
+                    de:58:5d:1c:44:e4:f4:fe:77:83:99:3f:57:71:2d:
+                    2e:95:07:cc:78:b8:3c:50:4b:ea:ca:a8:20:e8:9b:
+                    05:91:5c:40:ba:a9:c3:87:d5:95:d7:ab:67:33:03:
+                    1d:b9:c6:d7:ef:3a:4e:aa:7d:81:bc:1b:52:fb:0e:
+                    b4:7c:ce:9e:ff:d8:08:2b:33:ee:b6:d3:5c:7c:1a:
+                    7e:a3:cf:cd:92:42:7f:1b:a4:36:0b:d9:51:39:c6:
+                    cb:c1:65:c1:e2:84:53:30:ba:2e:f1:c3:07:71:09:
+                    69:dd:ff:92:16:2c:05:1d:60:28:1c:af:5e:76:88:
+                    9f:df:e7:97:fb:cd:19:48:7a:87:f6:24:e0:e1:e1:
+                    ff:76:95:93:65:72:44:29:5e:69:5d:2d:26:2c:fb:
+                    a7:06:63:ff:7f:02:29:82:61:42:d9:9a:0b:44:ea:
+                    89:c8:bc:4a:75:17:58:05:85:04:62:1f:70:bd:79:
+                    66:b6:bb:27:a6:88:c8:27:db:41:da:88:ec:4e:71:
+                    0a:20:e6:e3:79:2a:ee:b5:af:99:96:72:9d:ca:c3:
+                    e7:4f:9d:cd:e4:6b:22:e4:3b:54:2f:e2:e8:0c:df:
+                    6f:14:f8:74:4c:21:15:28:2c:51:5e:c8:8c:86:8e:
+                    e0:5e:0e:2d:e1:25:cc:47:8c:9e:b5:94:bb:34:e4:
+                    43:b1:cd:55:2a:6f:1f:14:fa:c2:2f:3c:a1:ba:65:
+                    f5:09:8d:1c:20:12:0d:80:33:35:f7:2f:d1:8b:ca:
+                    b8:77:f0:a3:7d:fa:bd:31:ba:3a:f4:c7:5e:8d:55:
+                    a7:c9:69
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
-            X509v3 Authority Key Identifier: 
-                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
-            X509v3 Subject Key Identifier: 
-                97:FB:A6:29:30:AE:9D:F0:D9:85:05:12:AA:D4:C1:D9:EC:0F:5B:CE
-            X509v3 Subject Alternative Name: 
-                DNS:*.mongodb-dev.net, DNS:mongodb-dev.net
             X509v3 Key Usage: critical
                 Digital Signature, Key Encipherment
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
-            X509v3 CRL Distribution Points: 
-                Full Name:
-                  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
-                Full Name:
-                  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
-            X509v3 Certificate Policies: 
-                Policy: 2.23.140.1.2.2
-                  CPS: http://www.digicert.com/CPS
-            Authority Information Access: 
-                OCSP - URI:http://ocsp.digicert.com
-                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
-            X509v3 Basic Constraints: 
+            X509v3 Basic Constraints: critical
                 CA:FALSE
+            X509v3 Subject Key Identifier: 
+                B8:6F:A5:A0:D0:70:D7:5E:AE:1E:54:5A:F1:26:DA:DD:CB:2C:5E:6F
+            X509v3 Authority Key Identifier: 
+                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
+            Authority Information Access: 
+                OCSP - URI:http://r10.o.lencr.org
+                CA Issuers - URI:http://r10.i.lencr.org/
+            X509v3 Subject Alternative Name: 
+                DNS:*.g6fyiaq.mesh.mongodb-dev.net, DNS:*.g6fyiaq.mongodb-dev.net
+            X509v3 Certificate Policies: 
+                Policy: 2.23.140.1.2.1
             CT Precertificate SCTs: 
                 Signed Certificate Timestamp:
                     Version   : v1 (0x0)
-                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
-                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
-                    Timestamp : Jun  2 08:44:16.090 2023 GMT
-                    Extensions: none
-                    Signature : ecdsa-with-SHA256
-                                30:46:02:21:00:88:AC:04:93:84:2C:2C:99:4F:B8:C4:
-                                06:B5:7F:9B:92:D3:51:25:72:1D:DB:12:D5:C0:AA:8F:
-                                D1:97:39:EF:4C:02:21:00:96:B1:11:40:0F:BA:03:28:
-                                88:BF:0C:DF:4B:4A:68:67:05:97:7E:F6:BD:6F:F3:0D:
-                                D8:9C:EB:90:75:FF:79:AB
-                Signed Certificate Timestamp:
-                    Version   : v1 (0x0)
-                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
-                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
-                    Timestamp : Jun  2 08:44:16.066 2023 GMT
+                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
+                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
+                    Timestamp : Aug 20 14:03:34.519 2024 GMT
                     Extensions: none
                     Signature : ecdsa-with-SHA256
-                                30:45:02:21:00:B0:C8:4E:75:71:84:DE:71:8F:D0:27:
-                                71:6C:4D:B1:E8:20:A3:54:AF:27:A8:A2:FA:AC:46:43:
-                                4A:08:C1:A9:94:02:20:1A:E1:63:79:E6:DB:4A:98:72:
-                                FF:BD:C4:A2:D8:F5:11:36:4C:95:6E:68:B4:CF:E7:35:
-                                84:BB:AC:A2:E6:D0:A0
+                                30:46:02:21:00:C6:92:47:D8:40:3A:B9:0C:BD:FC:45:
+                                3E:C6:28:06:80:62:0F:4A:EF:44:56:5F:8C:16:DF:C6:
+                                A4:0E:4C:76:DD:02:21:00:CA:36:0F:54:6B:84:37:F3:
+                                AD:50:5B:E8:DD:3D:D2:EA:34:82:72:50:D2:2C:2A:47:
+                                FB:EC:16:76:5A:E8:9E:0C
                 Signed Certificate Timestamp:
                     Version   : v1 (0x0)
-                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
-                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
-                    Timestamp : Jun  2 08:44:16.030 2023 GMT
+                    Log ID    : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
+                                4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
+                    Timestamp : Aug 20 14:03:34.658 2024 GMT
                     Extensions: none
                     Signature : ecdsa-with-SHA256
-                                30:44:02:20:51:59:38:3B:FF:76:EC:A2:3E:15:4B:60:
-                                23:84:20:88:66:C3:64:7C:94:51:B9:1A:BD:87:15:73:
-                                43:F5:96:BA:02:20:22:F3:7B:75:F4:58:58:C7:48:18:
-                                85:22:17:FC:ED:07:A2:8B:A0:07:0E:32:0F:16:9C:8B:
-                                E5:AA:6B:86:86:6B
+                                30:45:02:20:23:5B:E1:35:10:78:F9:99:9F:42:7F:FE:
+                                73:F4:74:1B:55:3D:B9:93:C9:A8:EE:E7:B2:61:52:12:
+                                D1:C9:06:0C:02:21:00:87:EA:87:A3:3A:B2:C6:F0:EA:
+                                52:5A:B2:7F:02:2E:CF:68:C8:A5:CB:54:0F:CB:CE:6A:
+                                CC:E0:3A:D1:09:D3:9C
     Signature Algorithm: sha256WithRSAEncryption
     Signature Value:
-        be:97:77:21:55:1d:c7:18:5f:52:de:a8:85:a5:d2:ee:48:29:
-        b3:46:2d:31:02:12:5b:88:1e:09:ac:f4:7e:fc:4d:e4:e8:c9:
-        56:7e:de:1e:dc:53:1f:27:1b:dd:07:68:39:1c:2e:91:86:20:
-        2a:f0:9a:d1:ff:c4:b5:c2:85:a7:ec:9c:b8:62:31:aa:5b:69:
-        8e:37:d4:cc:ec:7b:86:86:b2:a9:6d:60:8b:70:44:ca:72:7a:
-        d9:a8:54:96:f8:5a:e5:2b:2a:48:5d:4f:53:fb:b3:c9:67:70:
-        a3:a6:d5:be:6d:99:11:51:89:31:e3:b1:43:54:e0:7c:cd:96:
-        fd:2d:12:12:eb:a3:8e:b4:12:25:23:bf:a6:5d:70:c5:3f:8c:
-        9f:0e:5d:38:d0:4b:aa:67:30:d7:c3:47:76:20:bd:1a:55:2a:
-        b2:df:37:92:67:88:65:11:15:62:a8:08:3f:93:ee:c1:b1:79:
-        33:03:03:0b:46:d4:5f:d2:82:31:77:6c:42:12:89:f4:f8:af:
-        32:ab:45:59:91:bf:82:44:69:d2:49:7f:1b:f3:49:28:37:85:
-        74:3c:4d:92:1b:56:30:4c:69:79:5d:fc:4d:a6:7b:c6:e7:f5:
-        34:e6:dd:c0:25:f8:69:b2:86:3a:44:a9:41:ba:34:cd:fe:aa:
-        20:d2:57:ad
+        1d:11:b5:c6:7e:71:6c:63:34:8e:d4:eb:e6:42:ca:ce:fd:0d:
+        9a:7d:ea:49:43:8d:de:46:ad:27:09:a6:a7:5c:58:89:2f:47:
+        03:68:e2:19:0f:f6:76:be:47:0a:b6:d1:ed:5d:71:13:2a:12:
+        de:5e:41:cf:e1:a3:2c:46:07:81:da:b1:86:66:61:b0:0b:70:
+        19:33:4c:a3:29:e4:e6:79:f6:3f:1b:4a:51:6a:2a:0c:c1:07:
+        2c:db:cc:9a:3f:17:a2:ff:ac:19:76:9e:a2:d4:9b:c9:c2:75:
+        48:5c:fd:d4:5e:ff:cc:6b:f0:ea:73:da:0b:f8:fd:c5:92:42:
+        ca:ca:43:51:98:e5:4b:77:b6:0f:da:d2:83:33:77:bc:60:5c:
+        b7:60:12:42:10:78:5b:ed:cd:83:42:63:ba:96:de:0e:d8:9e:
+        a5:97:6a:6f:70:82:7c:82:2c:ca:e3:a3:34:61:7a:70:d1:03:
+        fc:89:06:1e:b4:f3:ed:b4:64:5f:54:b8:d5:6e:31:e0:fa:0b:
+        f6:be:b7:6c:38:78:f8:bb:22:f2:7c:6b:44:54:3e:91:3a:8c:
+        bd:4d:1b:b5:8a:a6:df:17:9b:cf:3a:bd:dc:c3:1e:c5:2c:f5:
+        19:32:75:0f:7b:54:30:ab:bb:7e:db:43:fb:ed:16:d9:03:81:
+        23:8a:8c:7a
 
 -----BEGIN CERTIFICATE-----
-MIIG5zCCBc+gAwIBAgIQA6g5A+iEzSQcnLEnjAp6mzANBgkqhkiG9w0BAQsFADBZ
-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
-aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMw
-NjAyMDAwMDAwWhcNMjQwNjA0MjM1OTU5WjBnMQswCQYDVQQGEwJVUzERMA8GA1UE
-CBMITmV3IFlvcmsxETAPBgNVBAcTCE5ldyBZb3JrMRYwFAYDVQQKEw1Nb25nb0RC
-LCBJbmMuMRowGAYDVQQDDBEqLm1vbmdvZGItZGV2Lm5ldDCCASIwDQYJKoZIhvcN
-AQEBBQADggEPADCCAQoCggEBAN+R2BibQZyDM1jpwkIAWqXAYejfOSBGM66HNMQT
-idLJTOtvpc3cMQe0z1N0mzwy6N9LZIiiA4fpJ/l7V8q+e1EP8rF4RQ5fBukKyf5n
-0Bk8jEEBX7dmoKQ7VBjCW16x155qePO9JB38zkPSdGCD9PNVpN2C8OnxPf/RtjIP
-yOSqlb9SM48vvijq6s+nE2V+PGEsOKCVRbgtfiAzODb9b8io4q1bPJGV2ewLCH2B
-JQy5QGuXitHE+U2bRVcDuVwDkNBoKVASh1lI8BnDTUI+gMNOfjDhu/74MFWDFcqv
-EhM62umRoxBt/LZkXYmjtBiafquQ3RH626+YElg8j0ci8lMCAwEAAaOCA5swggOX
-MB8GA1UdIwQYMBaAFHSFgMBmx9833s+9KTeqAx2+7c0XMB0GA1UdDgQWBBSX+6Yp
-MK6d8NmFBRKq1MHZ7A9bzjAtBgNVHREEJjAkghEqLm1vbmdvZGItZGV2Lm5ldIIP
-bW9uZ29kYi1kZXYubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
-BQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0cDovL2NybDMu
-ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEyNTYyMDIwQ0Ex
-LTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRH
-bG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwPgYDVR0gBDcwNTAzBgZn
-gQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BT
-MIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2lj
-ZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29t
-L0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3J0MAkGA1Ud
-EwQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB3AO7N0GTV2xrOxVy3nbTN
-E6Iyh0Z8vOzew1FIWUZxH7WbAAABiHtHY1oAAAQDAEgwRgIhAIisBJOELCyZT7jE
-BrV/m5LTUSVyHdsS1cCqj9GXOe9MAiEAlrERQA+6AyiIvwzfS0poZwWXfva9b/MN
-2JzrkHX/easAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYh7
-R2NCAAAEAwBHMEUCIQCwyE51cYTecY/QJ3FsTbHoIKNUryeoovqsRkNKCMGplAIg
-GuFjeebbSphy/73Eotj1ETZMlW5otM/nNYS7rKLm0KAAdQDatr9rP7W2Ip+bwrtc
-a+hwkXFsu1GEhTS9pD0wSNf7qwAAAYh7R2MeAAAEAwBGMEQCIFFZODv/duyiPhVL
-YCOEIIhmw2R8lFG5Gr2HFXND9Za6AiAi83t19FhYx0gYhSIX/O0HoougBw4yDxac
-i+Wqa4aGazANBgkqhkiG9w0BAQsFAAOCAQEAvpd3IVUdxxhfUt6ohaXS7kgps0Yt
-MQISW4geCaz0fvxN5OjJVn7eHtxTHycb3QdoORwukYYgKvCa0f/EtcKFp+ycuGIx
-qltpjjfUzOx7hoayqW1gi3BEynJ62ahUlvha5SsqSF1PU/uzyWdwo6bVvm2ZEVGJ
-MeOxQ1TgfM2W/S0SEuujjrQSJSO/pl1wxT+Mnw5dONBLqmcw18NHdiC9GlUqst83
-kmeIZREVYqgIP5PuwbF5MwMDC0bUX9KCMXdsQhKJ9PivMqtFWZG/gkRp0kl/G/NJ
-KDeFdDxNkhtWMExpeV38TaZ7xuf1NObdwCX4abKGOkSpQbo0zf6qINJXrQ==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 -----END CERTIFICATE-----

data/spec/support/certificates/retrieve-atlas-cert

@@ -4,7 +4,7 @@
 
 require 'tmpdir'
 
-host = 'freecluster-shard-00-00-oztdp.mongodb-dev.net'
+host = 'ac-ulwcmzm-shard-00-00.g6fyiaq.mongodb-dev.net'
 
 output = `openssl s_client -showcerts -servername #{host} -connect #{host}:27017 </dev/null`
 

data/spec/support/cluster_tools.rb

@@ -98,7 +98,7 @@ class ClusterTools
   def step_down
     admin_client.database.command(
       replSetStepDown: 4, secondaryCatchUpPeriodSecs: 2)
-  rescue Mongo::Error::OperationFailure => e
+  rescue Mongo::Error::OperationFailure::Family => e
     # While waiting for secondaries to catch up before stepping down, this node decided to step down for other reasons (189)
     if e.code == 189
       # success
@@ -118,7 +118,7 @@ class ClusterTools
       begin
         client.database.command(replSetStepUp: 1)
         break
-      rescue Mongo::Error::OperationFailure => e
+      rescue Mongo::Error::OperationFailure::Family => e
         # Election failed. (125)
         if e.code == 125
           # Possible reason is the node we are trying to elect has deny-listed
@@ -261,7 +261,7 @@ class ClusterTools
   def unfreeze_server(address)
     begin
       direct_client(address).use('admin').database.command(replSetFreeze: 0)
-    rescue Mongo::Error::OperationFailure => e
+    rescue Mongo::Error::OperationFailure::Family => e
       # Mongo::Error::OperationFailure: cannot freeze node when primary or running for election. state: Primary (95)
       if e.code == 95
         # The server we want to become primary may have already become the

data/spec/support/common_shortcuts.rb

@@ -176,7 +176,7 @@ module CommonShortcuts
         ClientRegistry.instance.global_client('root_authorized').command(killAllSessions: [])
       # killAllSessions also kills the implicit session which the driver uses
       # to send this command, as a result it always fails
-      rescue Mongo::Error::OperationFailure => e
+      rescue Mongo::Error::OperationFailure::Family => e
         # "operation was interrupted"
         unless e.code == 11601
           raise
@@ -396,7 +396,7 @@ module CommonShortcuts
         client.start_session(snapshot: true) do |session|
           client[collection].aggregate([{'$match': {any: true}}], session: session).to_a
         end
-      rescue Mongo::Error::OperationFailure => e
+      rescue Mongo::Error::OperationFailure::Family => e
         # Retry them as the server demands...
         if e.code == 246 # SnapshotUnavailable
           if Mongo::Utils.monotonic_time < start_time + 10

data/spec/support/constraints.rb

@@ -17,6 +17,12 @@ module Constraints
     end
   end
 
+  def forbid_x509_auth
+    before(:all) do
+      skip 'X.509 auth not allowed' if SpecConfig.instance.x509_auth?
+    end
+  end
+
   def max_bson_version(version)
     required_version = version.split('.').map(&:to_i)
     actual_version = bson_version(required_version.length)

data/spec/support/crypt/encrypted_fields/range-encryptedFields-Date.json

@@ -10,7 +10,7 @@
         "path": "encryptedDate",
         "bsonType": "date",
         "queries": {
-          "queryType": "rangePreview",
+          "queryType": "range",
           "sparsity": {
             "$numberLong": "1"
           },

data/spec/support/crypt/encrypted_fields/range-encryptedFields-DecimalNoPrecision.json

@@ -10,7 +10,7 @@
         "path": "encryptedDecimalNoPrecision",
         "bsonType": "decimal",
         "queries": {
-          "queryType": "rangePreview",
+          "queryType": "range",
           "sparsity": {
             "$numberInt": "1"
           }

data/spec/support/crypt/encrypted_fields/range-encryptedFields-DecimalPrecision.json

@@ -10,7 +10,7 @@
       "path": "encryptedDecimalPrecision",
       "bsonType": "decimal",
       "queries": {
-        "queryType": "rangePreview",
+        "queryType": "range",
         "sparsity": {
           "$numberInt": "1"
         },

data/spec/support/crypt/encrypted_fields/range-encryptedFields-DoubleNoPrecision.json

@@ -10,7 +10,7 @@
         "path": "encryptedDoubleNoPrecision",
         "bsonType": "double",
         "queries": {
-          "queryType": "rangePreview",
+          "queryType": "range",
           "sparsity": {
             "$numberLong": "1"
           }

data/spec/support/crypt/encrypted_fields/range-encryptedFields-DoublePrecision.json

@@ -10,7 +10,7 @@
         "path": "encryptedDoublePrecision",
         "bsonType": "double",
         "queries": {
-          "queryType": "rangePreview",
+          "queryType": "range",
           "sparsity": {
             "$numberLong": "1"
           },

data/spec/support/crypt/encrypted_fields/range-encryptedFields-Int.json

@@ -10,7 +10,7 @@
         "path": "encryptedInt",
         "bsonType": "int",
         "queries": {
-          "queryType": "rangePreview",
+          "queryType": "range",
           "sparsity": {
             "$numberLong": "1"
           },

data/spec/support/crypt/encrypted_fields/range-encryptedFields-Long.json

@@ -10,7 +10,7 @@
         "path": "encryptedLong",
         "bsonType": "long",
         "queries": {
-          "queryType": "rangePreview",
+          "queryType": "range",
           "sparsity": {
             "$numberLong": "1"
           },

data/spec/support/ocsp

@@ -1 +1 @@
-spec/support/../../.mod/drivers-evergreen-tools/.evergreen/ocsp
+../../.mod/drivers-evergreen-tools/.evergreen/ocsp

data/spec/support/recording_logger.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+# rubocop:todo all
+
+require 'stringio'
+
+# A "Logger-alike" class, quacking like ::Logger, used for recording messages
+# as they are written to the log
+class RecordingLogger < Logger
+  def initialize(*args, **kwargs)
+    @buffer = StringIO.new
+    super(@buffer, *args, **kwargs)
+  end
+
+  # Accesses the raw contents of the log
+  #
+  # @return [ String ] the raw contents of the log
+  def contents
+    @buffer.string
+  end
+
+  # Returns the contents of the log as individual lines.
+  #
+  # @return [ Array<String> ] the individual log lines
+  def lines
+    contents.split(/\n/)
+  end
+end

data/spec/support/shared/session.rb

@@ -110,8 +110,8 @@ shared_examples 'a failed operation using a session' do
     end
 
     it 'raises an error' do
-      expect([Mongo::Error::OperationFailure,
-              Mongo::Error::BulkWriteError]).to include(operation_result.class)
+      expect([Mongo::Error::OperationFailure::Family,
+              Mongo::Error::BulkWriteError].any? { |e| e === operation_result }).to be true
     end
 
     it 'updates the last use value' do

data/spec/support/spec_config.rb

@@ -172,6 +172,11 @@ class SpecConfig
     !!ENV['SERVERLESS']
   end
 
+  def kill_all_server_sessions?
+    !serverless? && # Serverless instances do not support killAllSessions command.
+      ClusterConfig.instance.fcv_ish >= '3.6'
+  end
+
   # Test suite configuration
 
   def client_debug?

data/spec/support/spec_setup.rb

@@ -28,7 +28,7 @@ class SpecSetup
         # more users to any other databases.
         begin
           create_user(client, SpecConfig.instance.root_user)
-        rescue Mongo::Error::OperationFailure => e
+        rescue Mongo::Error::OperationFailure::Family => e
           # When testing a cluster that requires auth, root user is already set up
           # and it is not creatable without auth.
           # Seems like every mongodb version has its own error message
@@ -61,7 +61,7 @@ class SpecSetup
     users = client.use('admin').database.users
     begin
       users.create(user)
-    rescue Mongo::Error::OperationFailure => e
+    rescue Mongo::Error::OperationFailure::Family => e
       if e.message =~ /User.*already exists/
         users.remove(user.name)
         users.create(user)

data/spec/support/utils.rb

@@ -330,8 +330,10 @@ module Utils
       when 'long'
         expected_class = BSON::Int64
         expected_key = '$numberLong'
+      when %w[int long]
+        return actual.is_a?(Numeric) || actual.is_a?(BSON::Int32) || actual.is_a?(BSON::Int64)
       else
-        raise "Tests do not currently support matching against $$type #{v['$$type']}"
+        raise "Tests do not currently support matching against $$type #{expected['$$type']}"
       end
 
       actual.is_a?(expected_class) || actual.key?(expected_key)