-
Type: New Feature
-
Resolution: Done
-
Priority: Minor - P4
-
None
-
Component/s: None
If the server is using a certificate signed by a CA with well-distributed certs, it ought to be possible to verify the certificate without providing an explicit list of trusted certificates.
Most languages either distribute their own canonical set of trusted certificates (as in Node.js) or know how to pull them off the OS (as in Python). Drivers should use them if available and no CA certificates have been explicitly passed in as configuration.
- depends on
-
RUST-154 Default to verifying certificates against default CA certificates
- Closed
-
PYTHON-872 When ssl=True and ssl_cert_reqs not provided, default to ssl.CERT_REQUIRED.
- Closed
-
PYTHON-874 Use certifi or wincertstore to load CA certificates on older pythons
- Closed
-
RUBY-886 Verify server certificates by default when ssl=true.
- Closed
- is related to
-
PHPC-223 Use explicit SSL options rather then stream context
- Closed
-
CDRIVER-1182 Load Windows trusted CA by default when no CA configured
- Closed
- related to
-
DRIVERS-302 Test connections to Mango
- Closed