The SSLParams constructor does not initialize its bool fields:

https://github.com/mongodb/mongo/blob/ea20ce71ee1151abc5bbe5ea60713a86d34a751a/src/mongo/util/net/ssl_options.h#L57-L64

The KMIP integration in ESE creates an SSLParams object on the stack in getKeyFromKMIPServer. But it does not initialize the SSLParams::sslWeakCertificateValidation field, leaving its value indeterminate. Then, the KMIPService uses these parameters to construct its SSLManager object. As a result, it is indeterminate whether the encrypted storage engine will or will not allow weak certificates. This was found with the undefined behavior sanitizer (look for 'runtime error'):

https://logkeeper.mongodb.org/build/572cf7809041304e1901cbde/test/572cf780be07c4295208ee89