@@ -23,7 +23,7 @@ Overview
2323In this guide, you can learn how to use the :wikipedia:`TLS <Transport_Layer_Security>`
2424protocol to secure your connection to a MongoDB deployment.
2525
26- When you enable TLS for a connection, the {+driver -short+} performs the following actions:
26+ When you enable TLS for a connection, the {+library -short+} performs the following actions:
2727
2828- Uses TLS to connect to the MongoDB deployment
2929- Verifies the deployment's certificate
@@ -41,7 +41,7 @@ To learn how to configure your MongoDB deployment for TLS, see the
4141
4242.. tip::
4343
44- The {+driver -short+} delegates most TLS behavior to the MongoDB C Driver.
44+ The {+library -short+} delegates most TLS behavior to the MongoDB C Driver.
4545 For information about how the C driver handles TLS, including configuration steps
4646 and expected behavior, see
4747 `Configuring TLS <https://www.mongodb.com/docs/languages/c/c-driver/current/libmongoc/guides/configuring_tls/#supported-libraries>`__
@@ -78,7 +78,7 @@ signed by a well-known CA (certificate authority), and your application relies o
7878to validate the certificate.
7979
8080During testing, however, you might want to act as your own CA.
81- In this case, you must instruct the {+driver -short+} to
81+ In this case, you must instruct the {+library -short+} to
8282use your CA certificates instead of ones signed by another CA.
8383
8484To do so, use the ``tlsCAFile`` connection option to specify the path to a ``.pem`` file
@@ -95,7 +95,7 @@ Specify a CA Directory
9595
9696If you are using OpenSSL or LibreSSL (``libtls``) for TLS support, you can also use
9797the ``ca_dir`` option to instruct
98- the {+driver -short+} to search for a CA file within a directory. The driver searches this
98+ the {+library -short+} to search for a CA file within a directory. The driver searches this
9999directory if it doesn't find a CA file at the path specified in the ``tlsCAFile`` option.
100100
101101The following code example shows how to use the ``driverOptions`` parameter to specify the
@@ -119,7 +119,7 @@ Check Certificate Revocation
119119----------------------------
120120
121121When an X.509 certificate is no longer trustworthy—for example, if its private key
122- has been compromised—the CA revokes the certificate. The {+driver -short+} includes two ways
122+ has been compromised—the CA revokes the certificate. The {+library -short+} includes two ways
123123to check whether a server's certificate has been revoked.
124124
125125.. _php-disable-ocsp:
@@ -131,15 +131,15 @@ The Online Certificate Status Protocol (OCSP) process varies depending on the ve
131131{+mdb-server+} you're connecting to:
132132
133133- **MongoDB v4.4 or later:** The server staples a
134- time-stamped OCSP response to its certificate. The {+driver -short+} validates the certificate
134+ time-stamped OCSP response to its certificate. The {+library -short+} validates the certificate
135135 against the OCSP response. If the CA has revoked the certificate, or if the OCSP response
136136 is otherwise invalid, the TLS handshake fails.
137- - **MongoDB v4.3 or earlier:** The server supplies an OCSP endpoint, which the {+driver -short+}
138- contacts directly. The {+driver -short+} then validates the certificate against the OCSP
137+ - **MongoDB v4.3 or earlier:** The server supplies an OCSP endpoint, which the {+library -short+}
138+ contacts directly. The {+library -short+} then validates the certificate against the OCSP
139139 response. If the CA hasn't revoked the certificate, the TLS handshake continues, even if
140140 the OCSP response is invalid or malformed.
141141
142- To stop the {+driver -short+} from contacting the OCSP endpoint, set the
142+ To stop the {+library -short+} from contacting the OCSP endpoint, set the
143143``tlsDisableOCSPEndpointCheck`` connection option to ``true``.
144144You can do this in two ways: by passing an argument to the
145145``MongoDB\Client`` constructor or through a parameter in your connection string.
@@ -148,15 +148,15 @@ You can do this in two ways: by passing an argument to the
148148
149149.. note::
150150
151- Even if the ``tlsDisableOCSPEndpointCheck`` option is set to ``true``, the {+driver -short+}
151+ Even if the ``tlsDisableOCSPEndpointCheck`` option is set to ``true``, the {+library -short+}
152152 still verifies any OCSP response stapled to a server's certificate.
153153
154154.. _php-crl:
155155
156156Certificate Revocation List
157157~~~~~~~~~~~~~~~~~~~~~~~~~~~
158158
159- Instead of using OCSP, you can use the instruct the {+driver -short+}
159+ Instead of using OCSP, you can use the instruct the {+library -short+}
160160to check the server's certificate
161161against a Certificate Revocation List (CRL) published by the CA. To do so, set the
162162``crl_file`` option to the file path of the CRL. Include this option in the
@@ -177,7 +177,7 @@ Present a Client Certificate
177177----------------------------
178178
179179Some MongoDB deployments require every connecting application to present a client certificate
180- that proves its identity. To specify the client certificate for the {+driver -short+} to
180+ that proves its identity. To specify the client certificate for the {+library -short+} to
181181present, set the ``tleCertificateKeyFile`` option to the file path of the ``.pem`` file that
182182contains your certificate and private key.
183183
@@ -214,7 +214,7 @@ of the ``MongoDB\Client`` constructor or through a parameter in your connection
214214Allow Insecure TLS
215215------------------
216216
217- When TLS is enabled, the {+driver -short+} automatically verifies the certificate that
217+ When TLS is enabled, the {+library -short+} automatically verifies the certificate that
218218the server presents. When testing your code, you can disable this verification.
219219This is known as *insecure TLS.*
220220
@@ -262,7 +262,7 @@ To disable only hostname verification, set the ``tlsAllowInvalidHostnames`` opti
262262API Documentation
263263-----------------
264264
265- To learn more about configuring TLS for the {+driver -short+},
265+ To learn more about configuring TLS for the {+library -short+},
266266see the following API documentation:
267267
268- - :ref :`MongoDB\Client <php-mongodb-client> `
268+ - :phpclass :`MongoDB\Client`
0 commit comments