turn back on ssl on couchdb

Author: cesine

.github/workflows/node.js.yml

@@ -31,7 +31,7 @@ jobs:
 
     - name: Create local config for tests
       run: |
-        echo 'module.exports = { usersDbConnection: { url: "http://localhost:5984" }};' > config/local.js
+        echo 'module.exports = { usersDbConnection: { url: "https://localhost:6984" }};' > config/local.js
 
     - name: Run Integration tests
       run: DEBUG=replay* npm run coverage || echo 'Test run failed replay no longer is working with latest nano which uses node fetch'

Dockerfile-couchdb

@@ -3,6 +3,7 @@ FROM couchdb:3.5.1
 WORKDIR /
 
 COPY etc/* /opt/couchdb/etc/
+COPY config/ssl_debug.* /opt/couchdb/etc/
 
 RUN set +x; \
   curl -X PUT http://admin:none@127.0.0.1:5984/_users; \

docker-compose.yml

@@ -13,6 +13,7 @@ services:
       dockerfile: ./Dockerfile-couchdb
     ports:
       - 5984:5984
+      - 6984:6984
     environment:
       - COUCHDB_USER=admin
       - COUCHDB_PASSWORD=none

etc/local.ini

@@ -14,3 +14,20 @@ admin = -pbkdf2-3f04b4318f9a5b3c20ff99fa9194744d0cffa603,e5fbfb69d2a5db31325d234
 
 [replicator]
 auth_plugins = couch_replicator_auth_noop
+
+[daemons]
+; enable SSL support by uncommenting the following line and supply the PEM's below.
+; the default ssl port CouchDB listens on is 6984
+httpsd = {couch_httpd, start_link, [https]}
+
+[ssl]
+enable = true
+; ciphers = undefined
+;tls_versions = undefined
+; secure_renegotiate = undefined
+cert_file = /opt/couchdb/etc/ssl_debug.crt
+key_file = /opt/couchdb/etc/ssl_debug.key
+; set to true to validate peer certificates
+verify_ssl_certificates = false
+; maximum peer certificate depth
+ssl_certificate_max_depth = 1

package.json

@@ -64,7 +64,7 @@
     "docker:build": "docker build -t fielddb-auth .",
     "docker:test": "echo 'module.exports = { usersDbConnection: { url: \"http://localhost:5984\" } };' > config/local.js && docker compose up -d && sleep 3 && docker compose logs && npm run setup && npm run test:deprecated",
     "docker:test:no-cache": "echo 'module.exports = { usersDbConnection: { url: \"http://localhost:5984\" } };' > config/local.js && docker compose build --no-cache && docker compose up -d && sleep 15 && docker compose logs && npm run setup && npm run test:deprecated",
-    "coverage": "NODE_ENV=test BUNYAN_LOG_LEVEL=FATAL NODE_TLS_REJECT_UNAUTHORIZED=0 nyc npm test",
+    "coverage": "NODE_ENV=test BUNYAN_LOG_LEVEL=FATAL nyc npm test",
     "lint": "eslint ",
     "lint:ci": "eslint .",
     "setup": "REPLAY=bloody SOURCE_URL=${SOURCE_URL:-https://public:none@corpusdev.example.org} mocha --timeout 20000 test/integration/install.js",