Uploaded image for project: 'Documentation'
  1. Documentation
  2. DOCS-12991

Investigate changes in SERVER-41121: x509: warn if a certificate used for auth will expire soon

XMLWordPrintableJSON

      Description

      Downstream Change Summary

      This change produces a new line in the server log for each connection from a client using an X509 certificate which is about to expire (within 30 days by default, configurable via setParameter 'tlsX509ExpirationWarningThresholdDays').

      Mostly DOCS, but tagging in CLOUD because this was originally an ask for Atlas.

      Description of Linked Ticket

      When a client authenticates to a MongoDB cluster using x509 certificates, it would be helpful if the server would warn (e.g. via a log line) that the certificate will expire soon so that it can be rotated ahead of time.

      Scope of changes

      Impact to Other Docs

      MVP (Work and Date)

      Resources (Scope or Design Docs, Invision, etc.)

            Assignee:
            ravind.kumar Ravind Kumar (Inactive)
            Reporter:
            backlog-server-pm Backlog - Core Eng Program Management Team
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved:
              4 years, 14 weeks, 1 day ago