test(NODE-4483): set crypt shared lib path (#3338)

Author: durran

.evergreen/config.in.yml

@@ -423,12 +423,12 @@ functions:
         script: |
           ${PREPARE_SHELL}
           cat <<EOT > prepare_client_encryption.sh
-          export CLIENT_ENCRYPTION=${CLIENT_ENCRYPTION}
+          export CLIENT_ENCRYPTION='${CLIENT_ENCRYPTION}'
           export CSFLE_KMS_PROVIDERS='${CSFLE_KMS_PROVIDERS}'
-          export AWS_ACCESS_KEY_ID="${AWS_ACCESS_KEY_ID}"
-          export AWS_SECRET_ACCESS_KEY="${AWS_SECRET_ACCESS_KEY}"
-          export CSFLE_GIT_REF="${CSFLE_GIT_REF}"
-          export CDRIVER_GIT_REF="${CDRIVER_GIT_REF}"
+          export AWS_ACCESS_KEY_ID='${AWS_ACCESS_KEY_ID}'
+          export AWS_SECRET_ACCESS_KEY='${AWS_SECRET_ACCESS_KEY}'
+          export CSFLE_GIT_REF='${CSFLE_GIT_REF}'
+          export CDRIVER_GIT_REF='${CDRIVER_GIT_REF}'
           EOT
     - command: shell.exec
       type: test
@@ -810,19 +810,25 @@ functions:
       params:
         working_dir: "src"
         timeout_secs: 60
+        shell: bash
         script: |
           ${PREPARE_SHELL}
 
           # Disable xtrace (just in case it was accidentally set).
           set +x
-          . ./prepare_client_encryption.sh
+          source ./prepare_client_encryption.sh
           rm -f ./prepare_client_encryption.sh
 
-          VERSION=${VERSION} DRIVERS_TOOLS=${DRIVERS_TOOLS} \
-            bash ${PROJECT_DIRECTORY}/.evergreen/prepare-crypt-shared-lib.sh
+          export VERSION=${VERSION}
+          export DRIVERS_TOOLS=${DRIVERS_TOOLS}
+
+          source ${PROJECT_DIRECTORY}/.evergreen/prepare-crypt-shared-lib.sh
+          export MONGODB_URI="${MONGODB_URI}"
+          export CRYPT_SHARED_LIB_PATH
+
+          echo "setting CRYPT_SHARED_LIB_PATH: $CRYPT_SHARED_LIB_PATH"
 
-          MONGODB_URI="${MONGODB_URI}" CRYPT_SHARED_LIB_PATH="${CRYPT_SHARED_LIB_PATH}" \
-            bash ${PROJECT_DIRECTORY}/.evergreen/run-custom-csfle-tests.sh
+          bash ${PROJECT_DIRECTORY}/.evergreen/run-custom-csfle-tests.sh
 
   "run custom snappy tests":
     - command: subprocess.exec

.evergreen/config.yml

@@ -385,12 +385,12 @@ functions:
         script: |
           ${PREPARE_SHELL}
           cat <<EOT > prepare_client_encryption.sh
-          export CLIENT_ENCRYPTION=${CLIENT_ENCRYPTION}
+          export CLIENT_ENCRYPTION='${CLIENT_ENCRYPTION}'
           export CSFLE_KMS_PROVIDERS='${CSFLE_KMS_PROVIDERS}'
-          export AWS_ACCESS_KEY_ID="${AWS_ACCESS_KEY_ID}"
-          export AWS_SECRET_ACCESS_KEY="${AWS_SECRET_ACCESS_KEY}"
-          export CSFLE_GIT_REF="${CSFLE_GIT_REF}"
-          export CDRIVER_GIT_REF="${CDRIVER_GIT_REF}"
+          export AWS_ACCESS_KEY_ID='${AWS_ACCESS_KEY_ID}'
+          export AWS_SECRET_ACCESS_KEY='${AWS_SECRET_ACCESS_KEY}'
+          export CSFLE_GIT_REF='${CSFLE_GIT_REF}'
+          export CDRIVER_GIT_REF='${CDRIVER_GIT_REF}'
           EOT
     - command: shell.exec
       type: test
@@ -775,19 +775,25 @@ functions:
       params:
         working_dir: src
         timeout_secs: 60
+        shell: bash
         script: |
           ${PREPARE_SHELL}
 
           # Disable xtrace (just in case it was accidentally set).
           set +x
-          . ./prepare_client_encryption.sh
+          source ./prepare_client_encryption.sh
           rm -f ./prepare_client_encryption.sh
 
-          VERSION=${VERSION} DRIVERS_TOOLS=${DRIVERS_TOOLS} \
-            bash ${PROJECT_DIRECTORY}/.evergreen/prepare-crypt-shared-lib.sh
+          export VERSION=${VERSION}
+          export DRIVERS_TOOLS=${DRIVERS_TOOLS}
+
+          source ${PROJECT_DIRECTORY}/.evergreen/prepare-crypt-shared-lib.sh
+          export MONGODB_URI="${MONGODB_URI}"
+          export CRYPT_SHARED_LIB_PATH
+
+          echo "setting CRYPT_SHARED_LIB_PATH: $CRYPT_SHARED_LIB_PATH"
 
-          MONGODB_URI="${MONGODB_URI}" CRYPT_SHARED_LIB_PATH="${CRYPT_SHARED_LIB_PATH}" \
-            bash ${PROJECT_DIRECTORY}/.evergreen/run-custom-csfle-tests.sh
+          bash ${PROJECT_DIRECTORY}/.evergreen/run-custom-csfle-tests.sh
   run custom snappy tests:
     - command: subprocess.exec
       params:

.evergreen/run-custom-csfle-tests.sh

@@ -1,5 +1,4 @@
 #! /usr/bin/env bash
-
 set +o xtrace # Do not write AWS credentials to stderr
 
 # Initiail checks for running these tests
@@ -10,6 +9,8 @@ if [ -z ${CSFLE_KMS_PROVIDERS+omitted} ]; then echo "CSFLE_KMS_PROVIDERS is unse
 export AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
 export AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
 export CSFLE_KMS_PROVIDERS=${CSFLE_KMS_PROVIDERS}
+export CRYPT_SHARED_LIB_PATH=${CRYPT_SHARED_LIB_PATH}
+echo "csfle CRYPT_SHARED_LIB_PATH: $CRYPT_SHARED_LIB_PATH"
 
 [ -s "$PROJECT_DIRECTORY/node-artifacts/nvm/nvm.sh" ] && source "$PROJECT_DIRECTORY"/node-artifacts/nvm/nvm.sh
 
@@ -66,10 +67,6 @@ export KMIP_TLS_CA_FILE="${DRIVERS_TOOLS}/.evergreen/x509gen/ca.pem"
 export KMIP_TLS_CERT_FILE="${DRIVERS_TOOLS}/.evergreen/x509gen/client.pem"
 export TEST_CSFLE=true
 
-if [ -n "$CRYPT_SHARED_LIB_PATH" ]; then
-  export CRYPT_SHARED_LIB_PATH=${CRYPT_SHARED_LIB_PATH}
-fi
-
 set +o errexit # We want to run both test suites even if the first fails
 npm run check:csfle
 DRIVER_CSFLE_TEST_RESULT=$?

test/tools/runner/hooks/configuration.js

@@ -149,7 +149,8 @@ const testConfigBeforeHook = async function () {
     ldap: MONGODB_URI.includes('authMechanism=PLAIN'),
     ocsp: process.env.OCSP_TLS_SHOULD_SUCCEED != null && process.env.CA_FILE != null,
     socks5: MONGODB_URI.includes('proxyHost='),
-    compressor: process.env.COMPRESSOR
+    compressor: process.env.COMPRESSOR,
+    cryptSharedLibPath: process.env.CRYPT_SHARED_LIB_PATH
   };
 
   console.error(inspect(currentEnv, { colors: true }));

test/tools/spec-runner/index.js

@@ -84,6 +84,12 @@ function translateClientOptions(options) {
           };
         }
 
+        if (process.env.CRYPT_SHARED_LIB_PATH) {
+          options.autoEncryption.extraOptions = {
+            cryptSharedLibPath: process.env.CRYPT_SHARED_LIB_PATH
+          };
+        }
+
         options.autoEncryption.kmsProviders = kmsProviders;
       }
 

test/tools/unified-spec-runner/unified-utils.ts

@@ -379,6 +379,12 @@ export function createClientEncryption(
     tlsOptions
   };
 
+  if (process.env.CRYPT_SHARED_LIB_PATH) {
+    autoEncryptionOptions.extraOptions = {
+      cryptSharedLibPath: process.env.CRYPT_SHARED_LIB_PATH
+    };
+  }
+
   const clientEncryption = new ClientEncryptionClass(clientEntity, autoEncryptionOptions);
   return clientEncryption;
 }