@@ -1257,27 +1257,24 @@ optional: true
12571257description : |
12581258 *New in MongoDB version 4.2.*
12591259
1260- Prevents a MongoDB server running with TLS from accepting incoming connections
1261- that use a specific protocol or protocols. To specify multiple protocols, use
1262- a comma separated list of protocols.
1260+ Prevents a MongoDB server running with |tls| from accepting incoming connections
1261+ that use a specific protocol or protocols. To specify multiple protocols, enter
1262+ a comma separated list of protocols. For example, ``TLS1_0,TLS1_1``.
12631263
12641264 This setting recognizes the following protocols: ``TLS1_0``, ``TLS1_1``, ``TLS1_2``,
1265- and starting in MongoDB 4.0.4 (and 3.6.9), ``TLS1_3``.
1265+ and starting in MongoDB 4.0.4 (and 3.6.9), ``TLS1_3``. If you specify an unrecognized protocol, the
1266+ server won't start.
12661267
1267- On macOS, you cannot disable ``TLS1_1`` and leave both ``TLS1_0`` and ``TLS1_2`` enabled.
1268- You must disable at least one of the other two, for example, ``TLS1_0,TLS1_1``.
1269-
1270- To list multiple protocols, specify as a comma separated list.
1271- For example, ``TLS1_0,TLS1_1``.
1272-
1273- Specifying an unrecognized protocol will prevent the server from starting.
1274-
1275- The specified disabled protocols overrides any default disabled protocols.
1268+ On macOS, you can't disable ``TLS1_1`` and enable both ``TLS1_0`` and ``TLS1_2``.
1269+ You must disable at least ``TLS1_0`` or ``TLS1_2`` also. For example, ``TLS1_0,TLS1_1``
1270+ disables ``TLS1_2`` on macOS.
1271+
1272+ The list of protocols that you disable replaces the default list of disabled protocols.
12761273
1277- Starting in MongoDB version 4.0, MongoDB disables the use of TLS 1.0 if TLS 1.1+
1278- is available on the system. To enable the disabled TLS 1.0, specify ``none`` to
1274+ Starting in MongoDB version 4.0, MongoDB disables the use of |tls| 1.0 if |tls| 1.1+
1275+ is available on the system. To enable the disabled |tls| 1.0, specify ``none`` as the value for
12791276 :setting:`spec.additionalMongodConfig.net.tls.disabledProtocols`.
1280- See :manual:`Disable TLS 1.0 </release-notes/4.0/#disable-tls-1.0>`.
1277+ To learn more about this setting, see :manual:`Disable TLS 1.0 </release-notes/4.0/#disable-tls-1.0>`.
12811278
12821279 Members of replica sets and sharded clusters must speak at least one protocol in common.
12831280
0 commit comments