We did not deprecate these options when the Unified URI Options specification (PYTHON-1670) was originally implemented. They should be deprecated in both 3.12 and master (4.0) branches.

Original description

PyMongo 3.9 added TLS equivalents for SSL options in the MongoClient constructor.

The examples haven't been updated yet (https://api.mongodb.com/python/current/examples/tls.html#client-certificates) but I'm unclear on the mapping of the former options of ssl_certfile and ssl_keyfile.

According to https://api.mongodb.com/python/3.9.0/changelog.html, ssl_certfile is deprecated in favour of tlsCertificateKeyFile, although I thought this option looks more analogous to ssl_keyfile.

Questions:

• Is the mapping of ssl_certfile to tlsCertificateKeyFile correct or is there a missing option?

• If this mapping is correct, is there a modern option name for ssl_keyfile or has this been obsoleted in favour of a different approach (for example, concatenating the certfile and keyfile is supported in the tlsCertificateKeyFile: https://docs.mongodb.com/manual/reference/connection-string/#urioption.tlsCertificateKeyFile).