Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-62942

Mongo node should not check active status of KMIP key when rotating

    • Type: Icon: Bug Bug
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 5.3.0
    • Affects Version/s: None
    • Component/s: None
    • Labels:
      None
    • Fully Compatible
    • ALL
    • Security 2022-02-07

      When rotating a key, it does not make sense to check the active status of a key that the node is rotating off of. If the user is trying to rotate the key because it has been deactivated, we would still want to continue with the key rotation, which is not the current behavior. Instead we see - `{"t":

      {"$date":"2022-01-24T21:13:35.429+00:00"}

      ,"s":"E", "c":"STORAGE", "id":24248, "ctx":"initandlisten","msg":"Unable to retrieve key","attr":{"keyId":".system","error":

      {"code":2,"codeName":"BadValue","errmsg":"State of KMIP Key for ESE is not active on startup. UID: (1). State: deactivated"}

      }}`

            Assignee:
            shreyas.kalyan@mongodb.com Shreyas Kalyan
            Reporter:
            shreyas.kalyan@mongodb.com Shreyas Kalyan
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: