[SERVER-39217] TLS intermediate CA certificate not working with macOS and 4.0.5 - MongoDB

XML

Word

Printable

Backwards Compatibility:
Minor Change
Operating System:
OS X
Backport Requested:

v4.0
Steps To Reproduce:

Hide

See attached file repro.tar.gz and read the README.markdown file for full repro details and results

note the file has some private keys but they were generated just for this repro

Show
See attached file repro.tar.gz and read the README.markdown file for full repro details and results note the file has some private keys but they were generated just for this repro
Sprint:
Security 2019-02-11, Security 2019-02-25, Security 2019-03-11

Combination of the following conditions causes a failure to connect with TLS from mongo shell:

Server's PEMKeyFile includes the server key and cert, and also the intermediate CA cert that signed the server cert
mongo shell CAFile is the root CA cert that signed the intermediate cert
Running MongoDB 4.0.5 (does not fail on 3.6)
Running on macOS (does not fail on Linux)