tls config

Author: mcasimir

docker/kerberos/config.js

@@ -4,18 +4,18 @@ const execa = require('execa');
 const {default: ConnectionString} = require('mongodb-connection-string-url');
 
 const principal = 'mongodb.user';
-const defaultConnectionString = new ConnectionString('mongodb://mongodb-kerberos-1.example.com:29017');
-defaultConnectionString.username = principal;
-defaultConnectionString.searchParams.set('authMechanism', 'GSSAPI');
+const simple = new ConnectionString('mongodb://mongodb-kerberos-1.example.com:29017');
+simple.username = principal;
+simple.searchParams.set('authMechanism', 'GSSAPI');
 
-const alternateConnectionString = new ConnectionString('mongodb://mongodb-kerberos-2.example.com:29018');
-alternateConnectionString.username = principal;
-alternateConnectionString.searchParams.set('authMechanism', 'GSSAPI');
-alternateConnectionString.searchParams.set('authMechanismProperties', 'SERVICE_NAME:alternate');
+const alternate = new ConnectionString('mongodb://mongodb-kerberos-2.example.com:29018');
+alternate.username = principal;
+alternate.searchParams.set('authMechanism', 'GSSAPI');
+alternate.searchParams.set('authMechanismProperties', 'SERVICE_NAME:alternate');
 
-const crossRealmConnectionString = new ConnectionString('mongodb://mongodb-kerberos-3.examplecrossrealm.com:29019');
-crossRealmConnectionString.username = principal;
-crossRealmConnectionString.searchParams.set('authMechanism', 'GSSAPI');
+const crossRealm = new ConnectionString('mongodb://mongodb-kerberos-3.examplecrossrealm.com:29019');
+crossRealm.username = principal;
+crossRealm.searchParams.set('authMechanism', 'GSSAPI');
 
 module.exports = {
   dockerCompose: {
@@ -50,13 +50,13 @@ module.exports = {
   },
   connections: {
     default: {
-      connectionString: defaultConnectionString.href
+      connectionString: simple.href
     },
     alternate: {
-      connectionString: alternateConnectionString.href
+      connectionString: alternate.href
     },
     crossRealm: {
-      connectionString: crossRealmConnectionString.href
+      connectionString: crossRealm.href
     }
   }
 };

docker/tls/config.js

@@ -21,6 +21,13 @@ x509.searchParams.set('tlsCAFile', path.resolve(__dirname, 'tls', 'ca.pem'));
 x509.searchParams.set('tlsCertificateKeyFile', path.resolve(__dirname, 'tls', 'client.pem'));
 x509.searchParams.set('authMechanism', 'MONGODB-X509');
 
+const x509WithSsh = new ConnectionString('mongodb://mongodb-tls-x509:27017');
+x509WithSsh.searchParams.set('tls', 'true');
+x509WithSsh.searchParams.set('tlsAllowInvalidHostnames', 'true');
+x509WithSsh.searchParams.set('tlsCAFile', path.resolve(__dirname, 'tls', 'ca.pem'));
+x509WithSsh.searchParams.set('tlsCertificateKeyFile', path.resolve(__dirname, 'tls', 'client.pem'));
+x509WithSsh.searchParams.set('authMechanism', 'MONGODB-X509');
+
 module.exports = {
   dockerCompose: {
     projectName: path.basename(__dirname),
@@ -44,6 +51,15 @@ module.exports = {
     },
     x509: {
       connectionString: x509.href
+    },
+    x509WithSsh: {
+      connectionString: x509WithSsh.href,
+      sshTunnel: {
+        host: 'localhost',
+        port: 22223,
+        username: 'root',
+        password: 'password'
+      }
     }
   }
 };