Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-36827

Warning about "No SSL certificate validation can be performed" is misleading

    XMLWordPrintableJSON

Details

    • Icon: Improvement Improvement
    • Resolution: Fixed
    • Icon: Minor - P4 Minor - P4
    • 4.0.3, 4.1.3
    • None
    • Security
    • Fully Compatible
    • v4.0
    • Security 2018-09-10

    Description

      Created from https://groups.google.com/d/msgid/mongodb-user/648dde1f-79ef-4056-85a4-7eaa2fcf8178%40googlegroups.com. The startup warning

      ** WARNING: No SSL certificate validation can be performed since no CA file has been provided
      **          Please specify an sslCAFile parameter.
      

      should actually read

      ** WARNING: No client certificate validation can be performed since no CA file has been provided
      **          Please specify an sslCAFile parameter.
      

      As long as the user has specified a valid SSLPEMKeyFile, TLS is working correctly and the client should be able to validate the server's certificate, and that is a common use case.

      Attachments

        Activity

          People

            shreyas.kalyan@mongodb.com Shreyas Kalyan
            jonathan.reams@mongodb.com Jonathan Reams
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: