Uploaded image for project: 'Drivers'
  1. Drivers
  2. DRIVERS-65

SSL certificate validation testing

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major - P3
    • Resolution: Fixed
    • None
    • None

    Description

      As of server 2.3.2, the server can validate SSL certificates on connect. This means that if you are using SSL and your client presents a certificate, it will be validated by the server. Also, the client can validate the server's certificate.

      Note that the support for limiting the encryption ciphers has been pushed to 2.6. The spec labels as-of-yet unimplemented features as "not for 2.4".
      The spec is targeted for completion in version 2.6.

      I've tested certificate validation using the mongo shell and using the C++ driver, but I'd like to get some other driver tests in as well.

      Currently we have only committed to Java and C# support, but other drivers should support this as time permits.

      Attachments

        Issue Links

          depends on

          Bug - A problem which impairs or prevents the functions of the product. RUBY-565 Support for SSL Certification Validation

          • Major - P3 - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. CSHARP-658 Add support for sending Client SSL certificates

          • Major - P3 - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. NODE-29 SSL Validation support

          • Major - P3 - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. PYTHON-466 SSL certificate verification

          • Major - P3 - Major loss of function.
          • Closed

          Task - A task that needs to be done. CDRIVER-215 SSL certificate validation testing

          • Critical - P2 - Crashes, loss of data, severe memory leak.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. RUST-160 SSL certificate validation testing

          • Major - P3 - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SWIFT-472 SSL certificate validation testing

          • Major - P3 - Major loss of function.
          • Closed
          is related to

          New Feature - A new feature of the product, which has yet to be developed. DRIVERS-124 Perform SSL server certificate validation in the drivers

          • Major - P3 - Major loss of function.
          • Closed

          Task - A task that needs to be done. DOCS-873 Improved SSL support Docs

          • Minor - P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. NODE-946 Not performing SSL server certificate validation

          • Minor - P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          related to

          Bug - A problem which impairs or prevents the functions of the product. SERVER-8209 reverse logic of --sslForceCertificateValidation

          • Major - P3 - Major loss of function.
          • Closed

          Task - A task that needs to be done. DRIVERS-302 Test connections to Mango

          • Major - P3 - Major loss of function.
          • Closed

          Activity

            People

              barrie Barrie Segal
              milkie@mongodb.com Eric Milkie
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: