-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
None
-
Query Integration
-
None
-
None
-
None
-
None
-
None
-
None
-
None
At the point of this ticket, the gpg key insertion / removal logic (in secure & insecure mode), and the signature verification logic should all be laid down.
If we are compiled in insecure mode (that is MONGO_CONFIG_EXT_SIG_SECURE is not defined) and the server flag '–extensionsSignaturePubKeyPath' is not present, skip all these operations (inserting the key, doing the verification, and removing the key).
- depends on
-
SERVER-115289 Perform extensions signature verification
-
- Open
-
-
SERVER-115610 Add extensions test gpg key to ring in insecure mode
-
- Open
-
-
SERVER-115282 Add --extensionsSignaturePubKeyPath server flag
-
- In Code Review
-