Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-34854

Backtrace during SSL downgrade of a sharded cluster

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Duplicate
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Security
    • Labels:
      None
    • Operating System:
      ALL
    • Steps To Reproduce:
      Hide
      1. Set up a MongoDB 3.7.9 2-shard PSA cluster with 3 config servers and 2 mongoses with sslMode set to disabled
      2. Restart each member with sslMode set to allowSSL
      3. Run db.adminCommand( { setParameter: 1, sslMode: "preferSSL" }

        ) on each member

      4. Run db.adminCommand( { setParameter: 1, sslMode: "requireSSL" }

        )

      5. Restart each member with sslMode set to preferSSL.  Some of the members will backtrace during this time.
      Show
      Set up a MongoDB 3.7.9 2-shard PSA cluster with 3 config servers and 2 mongoses with sslMode set to disabled Restart each member with sslMode set to allowSSL Run db.adminCommand( { setParameter: 1, sslMode: "preferSSL" } ) on each member Run db.adminCommand( { setParameter: 1, sslMode: "requireSSL" } ) Restart each member with sslMode set to preferSSL.  Some of the members will backtrace during this time.
    • Sprint:
      Platforms 2018-05-21

      Description

      I get backtraces on 4 members of a  MongoDB 3.7.9 sharded cluster while attempting an SSL downgrade from requireSSL to preferSSL.  The downgrade was attempted by restarting MongoDB with sslMode set to preferSSL.

      This is a 2-shard cluster with each shard having 3 members, 1 of which is an arbiter.  There are 3 config servers and 2 mongoses.

      The cluster first went through an upgrade of SSL from disabled to requireSSL.  This was done by first restarting each member with allowSSL.  Then there was one round of upgrading to preferSSL using setParameter, and then another round of setParameter to get to requireSSL.

      Then after that the downgrade was attempted (via restarting, not setParameter).

      I am attaching log files for all cluster members.  The following log files show backtraces:

      mongos2.2018-05-04T09-17-03.log
      shardA-2.2018-05-04T09-16-25.log
      shardB-1.2018-05-04T09-16-27.log
      shardB-3.2018-05-04T09-16-28.log

       

        Attachments

        1. cfg1.2018-05-04T09-15-04.log.gz
          133 kB
        2. cfg1.2018-05-04T09-15-52.log.gz
          5 kB
        3. cfg1.log.gz
          9 kB
        4. cfg2.2018-05-04T09-10-03.log.gz
          9 kB
        5. cfg2.2018-05-04T09-16-26.log.gz
          10 kB
        6. cfg2.log.gz
          17 kB
        7. cfg3.2018-05-04T09-13-11.log.gz
          58 kB
        8. cfg3.2018-05-04T09-17-24.log.gz
          17 kB
        9. mongos1.2018-05-04T09-10-33.log.gz
          28 kB
        10. mongos1.2018-05-04T09-15-49.log.gz
          52 kB
        11. mongos1.log.gz
          45 kB
        12. mongos2.2018-05-04T09-13-47.log.gz
          4 kB
        13. mongos2.2018-05-04T09-17-03.log.gz
          16 kB
        14. mongos2.log.gz
          13 kB
        15. shardA-1.2018-05-04T09-13-00.log.gz
          13 kB
        16. shardA-1.2018-05-04T09-57-27.log.gz
          464 kB
        17. shardA-2.2018-05-04T09-11-38.log.gz
          54 kB
        18. shardA-2.2018-05-04T09-16-25.log.gz
          61 kB
        19. shardA-2.2018-05-04T09-57-27.log.gz
          401 kB
        20. shardA-3.2018-05-04T09-10-02.log.gz
          4 kB
        21. shardA-3.2018-05-04T09-15-52.log.gz
          6 kB
        22. shardA-3.2018-05-04T09-57-27.log.gz
          364 kB
        23. shardB-1.2018-05-04T09-10-03.log.gz
          7 kB
        24. shardB-1.2018-05-04T09-16-27.log.gz
          14 kB
        25. shardB-1.2018-05-04T09-57-27.log.gz
          7 kB
        26. shardB-2.2018-05-04T09-09-33.log.gz
          6 kB
        27. shardB-2.2018-05-04T09-16-01.log.gz
          6 kB
        28. shardB-2.2018-05-04T09-17-13.log.gz
          6 kB
        29. shardB-3.2018-05-04T09-09-17.log.gz
          4 kB
        30. shardB-3.2018-05-04T09-15-47.log.gz
          4 kB
        31. shardB-3.2018-05-04T09-16-28.log.gz
          11 kB
        32. shardB-3.log.gz
          5 kB

          Issue Links

            Activity

              People

              Assignee:
              jason.carey Jason Carey
              Reporter:
              tim.olsen Timothy Olsen
              Participants:
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: