Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-34418

Disable GCM encryption with ESE on OS X with OpenSSL

    XMLWordPrintable

Details

    • Task
    • Status: Closed
    • Major - P3
    • Resolution: Fixed
    • None
    • 3.6.5, 3.7.4
    • Security
    • None
    • Fully Compatible
    • v3.6, v3.4
    • Platforms 2018-04-23
    • 20

    Description

      ESE on OS X has not historically supported AES256-GCM. This is because it used an old version of OpenSSL. Going forward, it's native cryptography will not support GCM. When built with a new copy of OpenSSL, it should continue to not support GCM to maintain compatibility with the native cryptography.

      Attachments

        Issue Links

          Activity

            People

              spencer.jackson@mongodb.com Spencer Jackson
              spencer.jackson@mongodb.com Spencer Jackson
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: