-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
3
-
None
-
Developer Tools
Until we have investigated the root cause of the certificate validation issues introduced by Electron setting the X509_V_FLAG_TRUSTED_FIRST flag in COMPASS-9694, we should bring back the CA list filtering introduced in https://github.com/mongodb-js/devtools-shared/commit/303956252de1451cffd68efcf3e8e251f5b166ff and removed in https://github.com/mongodb-js/devtools-shared/commit/9f2ff406b61afe220fe48d9d7be316194fbecfff.
This should only serve as a second fallback after first attempting to connect with the full CA list and then with only the Node.js CA list, since this option comes with a noticeable performance impact (which is why we removed it in the first place instead of just keeping it around).
- related to
-
COMPASS-8322 Expired certificates in the CA list cause connections to fail
-
- Closed
-
-
COMPASS-8253 Set X509_V_FLAG_PARTIAL_CHAIN when connecting
-
- Closed
-