-
Type:
Improvement
-
Resolution: Fixed
-
Priority:
Minor - P4
-
Affects Version/s: None
-
Component/s: Connection Layer
Use Case
As a... Node driver user
I want... to know which tls/ssl options are available and should be used with the driver
So that... I don't run into any surprising connection behavior
User Experience
- TLS options that are recommended by the common drivers spec should be implemented
- Old or irrelevant options should be deprecated
Dependencies
- upstream and/or downstream requirements and timelines to bear in mind
Risks/Unknowns
- Should we be implementing either of tlsDisableCertificateRevocationCheck or tlsDisableOCSPEndpointCheck?
- Do we need the ostensibly dead code we currently have for those options?
Acceptance Criteria
Implementation Requirements
- Double check the current set of tls options in the driver relative to the common drivers spec, identify and address any mismatches (notably, tlsDisableCertificateRevocationCheck and tlsDisableOCSPEndpointCheck)
- Deprecate any options that we have no intention of implementing, if any
- Remove any dead code associated with unimplemented options
Testing Requirements
- Update the uri options spec test skips: if we implement the options, unskip the tests; if we decide that we will not implement them (if they are OCSP only), remove the "TODO" comment and replace with rationale
Documentation Requirements
- Audit and update relevant connection option MongoDB manual docs
Follow Up Requirements
- Any new deprecations should be added to the V7 deprecation removal list in NODE-5545