Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-72846

Fix misleading startup warning about client certificate validation

    XMLWordPrintableJSON

Details

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major - P3 Major - P3
    • 7.0.0-rc0
    • None
    • None
    • Server Security
    • Fully Compatible
    • Security 2023-01-23, Security 2023-02-06, Security 2023-02-20
    • 157

    Description

      This warning at startup:

      {
          "t": {"$date": "2022-12-19T08:37:18.220+01:00"},
          "s": "W",
          "c": "CONTROL",
          "id": 22133,
          "ctx": "initandlisten",
          "msg": "No client certificate validation can be performed since no CA file has been provided. Please specify an sslCAFile parameter"
      }
      

      is logged when the CAFile is unspecified. However, if clusterCAFile is specified (instead of CAFile), this warning is still logged even though client certificate validation can be performed using the clusterCAFile. We should fix it so that this warning only shows up if CAFile and clusterCAFile are not provided.

      Attachments

        Activity

          People

            adrian.gonzalez@mongodb.com Adrian Gonzalez Montemayor
            erwin.pe@mongodb.com Erwin Pe
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: