Description

In the UI for both, oplog store and blockstore configuration, we only have the `Use TLS/SSL` check box:

However there is no way to configure client certificate location or CA file from the UI.

I suspect that the answer is that SSL needs to be enabled for the Application Database and that mongodb.ssl.CAFile, mongodb.ssl.PEMKeyFile and mongodb.ssl.PEMKeyFilePassword from conf-mms.properties will be used for the oplog store.

Consequently, it is not possible to use a different set of certificates for blockstore/oplog store than those that are used for the App DB.

But it is not really obvious from the documentation:

• Configure the Connections to the Backing MongoDB Instances

Scope of changes

Impact to Other Docs

MVP (Work and Date)

Resources (Scope or Design Docs, Invision, etc.)