Skip to content

Commit 982ac0d

Browse files
authored
DOCS-16619 Clarify allowInvalidCertificates and allowInvalidHostnames (#6129)
* DOCS-16619 Clarify allowInvalidCertificates and allowInvalidHostnames parameter scope * edits * CT feedback
1 parent 852d63d commit 982ac0d

File tree

1 file changed

+10
-8
lines changed

1 file changed

+10
-8
lines changed

source/reference/configuration-options.txt

Lines changed: 10 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1725,11 +1725,11 @@ Core Options
17251725

17261726
.. include:: /includes/extracts/tls-facts-x509-invalid-certificate.rst
17271727

1728-
When using
1729-
the :setting:`net.tls.allowInvalidCertificates` setting, MongoDB
1728+
When using the ``net.tls.allowInvalidCertificates`` setting, MongoDB
17301729
logs a warning regarding the use of the invalid certificate.
17311730

1732-
.. include:: /includes/extracts/tls-facts-see-more.rst
1731+
For more information about TLS and MongoDB, see
1732+
:ref:`configure-mongod-mongos-for-tls-ssl` and :ref:`inter-process-auth`.
17331733

17341734

17351735
.. setting:: net.tls.allowInvalidHostnames
@@ -1738,12 +1738,14 @@ Core Options
17381738

17391739
*Default*: false
17401740

1741-
When :setting:`net.tls.allowInvalidHostnames` is ``true``, MongoDB disables the validation of the
1742-
hostnames in TLS certificates, allowing :binary:`~bin.mongod` to connect to
1743-
MongoDB instances if the hostname their certificates do not match the
1744-
specified hostname.
1741+
When ``net.tls.allowInvalidHostnames`` is ``true``, MongoDB disables
1742+
the validation of the hostnames in TLS certificates. This allows
1743+
:binary:`~bin.mongod` or :binary:`~bin.mongos` to connect to other MongoDB
1744+
instances in the cluster, even if the hostname of their certificates does not
1745+
match the specified hostname.
17451746

1746-
.. include:: /includes/extracts/tls-facts-see-more.rst
1747+
For more information about TLS and MongoDB, see
1748+
:ref:`configure-mongod-mongos-for-tls-ssl`.
17471749

17481750

17491751
.. setting:: net.tls.disabledProtocols

0 commit comments

Comments
 (0)