CDRIVER-4528 Permit tlsDisableOCSPEndpointCheck in KMS TLS options (#1153)

* CDRIVER-4528 Permit `tlsDisableOCSPEndpointCheck` in KMS TLS options

* Use URI macro

Co-authored-by: Ezra Chung <[email protected]>

Author: kevinAlbs

src/libmongoc/src/mongoc/mongoc-crypt.c

@@ -1113,6 +1113,10 @@ _parse_one_tls_opts (bson_iter_t *iter,
          continue;
       }
 
+      if (0 == bson_strcasecmp (key, MONGOC_URI_TLSDISABLEOCSPENDPOINTCHECK)) {
+         continue;
+      }
+
       bson_set_error (
          error,
          MONGOC_ERROR_CLIENT_SIDE_ENCRYPTION,

src/libmongoc/tests/test-mongoc-client-side-encryption.c

@@ -3530,6 +3530,22 @@ test_kms_tls_options_extra_rejected (void *unused)
    ASSERT (NULL == ce);
    mongoc_client_encryption_opts_destroy (ce_opts);
 
+   /* Test that tlsDisableOCSPEndpointCheck may be set. */
+   memset (&error, 0, sizeof (bson_error_t));
+   ce_opts = mongoc_client_encryption_opts_new ();
+   mongoc_client_encryption_opts_set_keyvault_namespace (
+      ce_opts, "keyvault", "datakeys");
+   mongoc_client_encryption_opts_set_keyvault_client (ce_opts, keyvault_client);
+   mongoc_client_encryption_opts_set_kms_providers (ce_opts, kms_providers);
+   mongoc_client_encryption_opts_set_tls_opts (
+      ce_opts,
+      tmp_bson ("{'aws': {'%s': true}}",
+                MONGOC_URI_TLSDISABLEOCSPENDPOINTCHECK));
+   ce = mongoc_client_encryption_new (ce_opts, &error);
+   ASSERT_OR_PRINT (ce, error);
+   mongoc_client_encryption_destroy (ce);
+   mongoc_client_encryption_opts_destroy (ce_opts);
+
    mongoc_client_destroy (keyvault_client);
 }