Loading...

XML

Word

Printable

JSON

Type: Task
Resolution: Fixed
Priority: Major - P3
Fix Version/s: 4.9.0-alpha0
Affects Version/s: None
Component/s: None
Labels:
None

Backwards Compatibility:
Fully Compatible
Sprint:
Sharding 2020-10-19, Sharding 2020-11-02, Sharding 2020-11-16, Sharding 2020-11-30
Linked BF Score:
32

This is part of the effort to "Support Multiple Cluster Certificates for Tenant Migrations".

In the existing code (see SSLManagerOpenSSL::_setupPEM()) the certificate has to be read from PEM file. In the tenant migration project we need to support temporary certificates sent to us as part of the start migration command. The cert will be sent as a payload to this command.

is depended on by

SERVER-51811 Make the TransportLayerASIO to accept transient SSL params in connect()

Closed

is related to

SERVER-52858 Server-side MacOS and Windows SSL configuration doesn't fail if the PEM file is absent

Closed

SERVER-51600 Make donorStartMigration and recipientSyncData parse the passed-in cert and key

Closed

related to

SERVER-52870 Investigate SSL breakages reproduced by pending test tenant_migration_donor_ssl.js

Closed

Assignee:: Andrew Shuvalov (Inactive)

Reporter:: Andrew Shuvalov (Inactive)

Participants:: Andrew Shuvalov, Githook User

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Created:: Oct 14 2020 04:58:33 PM UTC

Updated:: Oct 29 2023 10:01:57 PM UTC

Resolved:: Nov 15 2020 09:58:32 PM UTC

Details

Description

Attachments

Issue Links

Activity

People

Dates