-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
None
-
Query Integration
-
None
-
None
-
None
-
None
-
None
-
None
-
None
At the point of doing this ticket, the secure version of the key ring insertion logic should already be laid down, and the '–extensionsSignaturePubKeyPath' server option should already exist in insecure build mode.
In this ticket, modify the key ring insertion logic to take an argument of which public key to insert. If the '–extensionsSignaturePubKeyPath' option is specified, the key in that path should be the one inserted into the key ring (otherwise, it should remain the production mongot-extensions.pub key).
Ensure that any logic that references '–extensionsSignaturePubKeyPath' is guarded under #ifndef MONGO_CONFIG_EXT_SIG_SECURE.
- depends on
-
SERVER-115288 Add extensions gpg key to ring in secure mode
-
- Open
-
-
SERVER-115282 Add --extensionsSignaturePubKeyPath server flag
-
- In Code Review
-
- is depended on by
-
SERVER-115611 Add option to skip extensions signature verification in insecure mode
-
- Open
-