Skip to content

Conversation

@lerouxb
Copy link
Contributor

@lerouxb lerouxb commented Mar 4, 2024

Based on https://jira.mongodb.org/browse/SERVER-72839?focusedCommentId=5678381&focusedId=5678381&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-5678381 and what mongosh' tests do it seems we need this because we're not specifying a certificate in the corresponding client connections/ tests.

CAFile: /etc/mongod/tls/ca.pem
allowInvalidCertificates: true
allowInvalidHostnames: true
allowConnectionsWithoutCertificates: true
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not sure if it is needed here. I left it out of the x509 server config because those tests seem to succeed anyway.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Adding this to the config where the server is expected X.509 auth would break the tests there, yeah

CAFile: /etc/mongod/tls/ca.pem
allowInvalidCertificates: true
allowInvalidHostnames: true
allowConnectionsWithoutCertificates: true
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Adding this to the config where the server is expected X.509 auth would break the tests there, yeah

@lerouxb lerouxb merged commit 87241fc into main Mar 4, 2024
@lerouxb lerouxb deleted the allowConnectionsWithoutCertificates branch March 4, 2024 13:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants