CSHARP-2903: Update Windows tests in EG to add certificates to system store

Author: vincentkam

evergreen/add-certs.sh

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+
+set -o xtrace   # Write all commands first to stderr
+set -o errexit  # Exit the script with an error if any of the commands fail
+
+if [[ "$OS" =~ Windows|windows ]]; then
+    certutil.exe -addstore "Root" ${DRIVERS_TOOLS}/.evergreen/x509gen/ca.pem
+fi

evergreen/evergreen.yml

@@ -218,7 +218,9 @@ functions:
           export FLE_AWS_ACCESS_KEY_ID=${FLE_AWS_ACCESS_KEY_ID}
           export FLE_AWS_SECRET_ACCESS_KEY=${FLE_AWS_SECRET_ACCESS_KEY}
           ${PREPARE_SHELL}
+          evergreen/add-certs.sh
           AUTH=${AUTH} SSL=${SSL} MONGODB_URI="${MONGODB_URI}" TOPOLOGY=${TOPOLOGY} OS=${OS} COMPRESSOR=${COMPRESSOR} evergreen/run-tests.sh
+          evergreen/remove-certs.sh
 
   run-atlas-connectivity-tests:
     - command: shell.exec
@@ -309,7 +311,7 @@ pre:
   - func: fix-absolute-paths
   - func: init-test-results
   - func: make-files-executable
-  
+
 post:
   # Removed, causing timeouts
   # - func: upload-working-dir
@@ -366,7 +368,7 @@ axes:
       - id: "4.2"
         display_name: "4.2"
         variables:
-           VERSION: "4.2"       
+           VERSION: "4.2"
       - id: "4.0"
         display_name: "4.0"
         variables:

evergreen/remove-certs.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+set -o xtrace   # Write all commands first to stderr
+set -o errexit  # Exit the script with an error if any of the commands fail
+
+if [[ "$OS" =~ Windows|windows ]]; then
+    certutil.exe -delstore "Root" \
+    `openssl x509 -noout -text -in ${DRIVERS_TOOLS}/.evergreen/x509gen/ca.pem\
+        | grep Serial\
+        | sed 's/.*(0x\(.*\))/\1/'`
+fi

evergreen/run-tests.sh

@@ -7,7 +7,7 @@ set -o errexit  # Exit the script with error if any of the commands fail
 #       AUTH                    Set to enable authentication. Values are: "auth" / "noauth" (default)
 #       SSL                     Set to enable SSL. Values are "ssl" / "nossl" (default)
 #       MONGODB_URI             Set the suggested connection MONGODB_URI (including credentials and topology info)
-#       TOPOLOGY                Allows you to modify variables and the MONGODB_URI based on test topology 
+#       TOPOLOGY                Allows you to modify variables and the MONGODB_URI based on test topology
 #                               Supported values: "server", "replica_set", "sharded_cluster"
 
 AUTH=${AUTH:-noauth}
@@ -25,9 +25,9 @@ provision_ssl () {
   uri_environment_variable_name=$1
   # Arguments for auth + SSL
   if [ "$AUTH" != "noauth" ] || [ "$TOPOLOGY" == "replica_set" ]; then
-    export $uri_environment_variable_name="${!uri_environment_variable_name}&ssl=true&sslVerifyCertificate=false"
+    export $uri_environment_variable_name="${!uri_environment_variable_name}&ssl=true"
   else
-    export $uri_environment_variable_name="${!uri_environment_variable_name}/?ssl=true&sslVerifyCertificate=false"
+    export $uri_environment_variable_name="${!uri_environment_variable_name}/?ssl=true"
   fi
 }
 
@@ -57,7 +57,7 @@ fi
 if [ "$SSL" != "nossl" ]; then
    provision_ssl MONGODB_URI
    if [ "$TOPOLOGY" == "sharded_cluster" ]; then
-     provision_ssl MONGODB_URI_WITH_MULTIPLE_MONGOSES  
+     provision_ssl MONGODB_URI_WITH_MULTIPLE_MONGOSES
    fi
 fi
 
@@ -80,7 +80,7 @@ echo "Final MongoDB_URI: $MONGODB_URI"
 if [ "$TOPOLOGY" == "sharded_cluster" ]; then
   echo "Final MongoDB URI with multiple mongoses: $MONGODB_URI_WITH_MULTIPLE_MONGOSES"
 fi
-for var in TMP TEMP NUGET_PACKAGES NUGET_HTTP_CACHE_PATH APPDATA; do 
-  export $var=z:\\data\\tmp; 
+for var in TMP TEMP NUGET_PACKAGES NUGET_HTTP_CACHE_PATH APPDATA; do
+  export $var=z:\\data\\tmp;
 done
 powershell.exe .\\build.ps1 -target ${TARGET}