Skip to content

Commit 0bbcd80

Browse files
authored
DOCS-16619 Clarify allowInvalidCertificates and allowInvalidHostnames (#6129) (#6194)
* DOCS-16619 Clarify allowInvalidCertificates and allowInvalidHostnames parameter scope * edits * CT feedback
1 parent a8b2853 commit 0bbcd80

File tree

1 file changed

+10
-8
lines changed

1 file changed

+10
-8
lines changed

source/reference/configuration-options.txt

Lines changed: 10 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1480,11 +1480,11 @@ Core Options
14801480

14811481
.. include:: /includes/extracts/tls-facts-x509-invalid-certificate.rst
14821482

1483-
When using
1484-
the :setting:`net.tls.allowInvalidCertificates` setting, MongoDB
1483+
When using the ``net.tls.allowInvalidCertificates`` setting, MongoDB
14851484
logs a warning regarding the use of the invalid certificate.
14861485

1487-
.. include:: /includes/extracts/tls-facts-see-more.rst
1486+
For more information about TLS and MongoDB, see
1487+
:ref:`configure-mongod-mongos-for-tls-ssl` and :ref:`inter-process-auth`.
14881488

14891489

14901490
.. setting:: net.tls.allowInvalidHostnames
@@ -1493,12 +1493,14 @@ Core Options
14931493

14941494
*Default*: false
14951495

1496-
When :setting:`net.tls.allowInvalidHostnames` is ``true``, MongoDB disables the validation of the
1497-
hostnames in TLS certificates, allowing :binary:`~bin.mongod` to connect to
1498-
MongoDB instances if the hostname their certificates do not match the
1499-
specified hostname.
1496+
When ``net.tls.allowInvalidHostnames`` is ``true``, MongoDB disables
1497+
the validation of the hostnames in TLS certificates. This allows
1498+
:binary:`~bin.mongod` or :binary:`~bin.mongos` to connect to other MongoDB
1499+
instances in the cluster, even if the hostname of their certificates does not
1500+
match the specified hostname.
15001501

1501-
.. include:: /includes/extracts/tls-facts-see-more.rst
1502+
For more information about TLS and MongoDB, see
1503+
:ref:`configure-mongod-mongos-for-tls-ssl`.
15021504

15031505

15041506
.. setting:: net.tls.disabledProtocols

0 commit comments

Comments
 (0)