Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-32981

Disable TLS 1.0 by default

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.7.4
    • Component/s: Networking
    • Labels:
    • Backwards Compatibility:
      Major Change
    • Sprint:
      Platforms 2018-04-09

      Description

      TLS 1.0 will be disabled by default on all platforms where MongoDB is linked against OpenSSL 1.0.1 or later.

      A new boolean startup server parameter will be added “enableInsecureTLS1_0” to enable TLS 1.0. It is an error to set this parameter if net.ssl.disabledProtocols contains "noTLS1_0".

        Attachments

          Issue Links

          depends on

          Task - A task that needs to be done. SERVER-32923 Platform Support: remove SLES11 builds

          • Major - P3 - Major loss of function.
          • Closed
          is depended on by

          Improvement - An improvement or enhancement to an existing feature or task. SERVER-34237 Expose means for shell to disable TLS 1.0

          • Major - P3 - Major loss of function.
          • Closed
          is documented by

          Task - A task that needs to be done. DOCS-11541 Docs for SERVER-32981: Disable TLS 1.0 by default

          • Major - P3 - Major loss of function.
          • Closed

            Activity

              People

              Assignee:
              sara.golemon Sara Golemon
              Reporter:
              mark.benvenuto Mark Benvenuto
              Participants:
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: