Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-36827

Warning about "No SSL certificate validation can be performed" is misleading

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor - P4
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 4.0.3, 4.1.3
    • Component/s: Security
    • Labels:
    • Backwards Compatibility:
      Fully Compatible
    • Backport Requested:
      v4.0
    • Sprint:
      Security 2018-09-10

      Description

      Created from https://groups.google.com/d/msgid/mongodb-user/648dde1f-79ef-4056-85a4-7eaa2fcf8178%40googlegroups.com. The startup warning

      ** WARNING: No SSL certificate validation can be performed since no CA file has been provided
      **          Please specify an sslCAFile parameter.
      

      should actually read

      ** WARNING: No client certificate validation can be performed since no CA file has been provided
      **          Please specify an sslCAFile parameter.
      

      As long as the user has specified a valid SSLPEMKeyFile, TLS is working correctly and the client should be able to validate the server's certificate, and that is a common use case.

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: