Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-38430

Rename tlsPEMKeyFile and tlsPEMKeyPassword in client and server

    • Type: Icon: Improvement Improvement
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 4.1.7
    • Affects Version/s: None
    • Component/s: None
    • Labels:
      None
    • Minor Change
    • Security 2018-12-31, Security 2019-01-14

      To unify with mongodb:// URI options, we'll rename the tlsPEMKeyFile/tlsPEMKeyPassword to tlsCertificateKeyFile/tlsCertificateKeyFilePassword.

      Also, since tlsPEMKeyFile/Password were only just introduced in the 4.1 dev branch (renamed from ssl*), we'll remove the tlsPEMKeyFile/Password settings entirely, leaving only the ssl* variants as deprecated aliases.

      The idl definitions in ssl_options_server.idl and ssl_options_client.idl would thus look like:

        "net.tls.certificateKeyFile":       # Changed from "net.tls.PEMKeyFile"
          description: "PEM file for TLS"
          short_name: tlsCertificateKeyFile   # Changed from "tlsPEMKeyFile"
          deprecated_name: "net.ssl.PEMKeyFile"
          deprecated_short_name: sslPEMKeyFile
          arg_vartype: String
        "net.tls.certificateKeyFilePassword":      # Changed form "net.tls.PEMKeyPassword"
          description: "PEM file password"
          short_name: tlsCertificateKeyFilePassword       # Changed from: tlsPEMKeyPassword
          deprecated_name: "net.ssl.PEMKeyPassword"
          deprecated_short_name: sslPEMKeyPassword
          arg_vartype: String
          cpp_varname: sslGlobalParams.sslPEMKeyPassword
          implicit: ''
      

            Assignee:
            jonathan.reams@mongodb.com Jonathan Reams
            Reporter:
            sara.golemon@mongodb.com Sara Golemon
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: