Fix sequelize tests to work in secure mode

Author: rafiss

node/sequelize/models/index.js

@@ -2,19 +2,53 @@
 
 var fs        = require('fs');
 var Sequelize = require('sequelize-cockroachdb');
-var sequelize = new Sequelize(process.env.ADDR, {
-  dialectOptions: {cockroachdbTelemetryDisabled : true}
-});
+
+if (process.env.ADDR === undefined) {
+  throw new Error("ADDR (database URL) must be specified.");
+}
+
+var url = new URL(process.env.ADDR);
+var opts = {
+  dialect: "postgres",
+  username: url.username,
+  host: url.hostname,
+  port: url.port,
+  database: url.pathname.substring(1), // ignore leading '/'
+  dialectOptions: {
+    cockroachdbTelemetryDisabled: true,
+    ssl: {},
+  },
+  logging: false,
+};
+
+if (url.password) {
+  opts.password = url.password
+}
+if (url.searchParams.has("options")) {
+  var pgOpts = url.searchParams.get("options")
+  var cluster = pgOpts.match(/cluster=([^\s]+)/)[1]
+  opts.database = `${cluster}.${opts.database}`
+}
+if (url.searchParams.get("sslmode") === "disable") {
+  delete opts.dialectOptions.ssl
+} else {
+  if (url.searchParams.has("sslrootcert")) {
+    opts.dialectOptions.ssl.ca = fs.readFileSync(url.searchParams.get("sslrootcert").toString())
+  }
+  if (url.searchParams.has("sslcert")) {
+    opts.dialectOptions.ssl.cert = fs.readFileSync(url.searchParams.get("sslcert").toString())
+  }
+  if (url.searchParams.has("sslkey")) {
+    opts.dialectOptions.ssl.key = fs.readFileSync(url.searchParams.get("sslkey").toString())
+  }
+}
+var sequelize = new Sequelize(opts);
 var DataTypes = Sequelize.DataTypes;
 
 if (!Sequelize.supportsCockroachDB) {
   throw new Error("CockroachDB dialect for Sequelize not installed");
 }
 
-if (process.env.ADDR === undefined) {
-  throw new Error("ADDR (database URL) must be specified.");
-}
-
 module.exports.Customer = sequelize.define('customer', {
   name: DataTypes.STRING
 }, {

testing/main_test.go

@@ -439,15 +439,7 @@ func TestHibernate(t *testing.T) {
 }
 
 func TestSequelize(t *testing.T) {
-	testORMForAuthModesExcept(t,
-		testInfo{language: "node", orm: "sequelize"},
-		map[authMode]string{
-			// Requires bespoke code to actually use SSL, see:
-			// https://github.com/sequelize/sequelize/issues/10015
-			//authClientCert: "needs custom SSL setup",
-			//authPassword:   "needs custom SSL setup",
-		},
-	)
+	testORMForAuthModesExcept(t, testInfo{language: "node", orm: "sequelize"}, nothingSkipped())
 }
 
 func TestSQLAlchemy(t *testing.T) {
@@ -469,4 +461,3 @@ func TestDjango(t *testing.T) {
 func TestActiveRecord(t *testing.T) {
 	testORMForAuthModesExcept(t, testInfo{language: "ruby", orm: "activerecord"}, nothingSkipped())
 }
-