Loading...

XML

Word

Printable

JSON

Details

Type: Task
Resolution: Fixed
Priority: Major - P3
Fix Version/s: 7.0.0-rc0
Affects Version/s: None
Component/s: None
Labels:
- auto-reverted

Assigned Teams:

Server Security
Backwards Compatibility:
Minor Change
Sprint:
Security 2023-04-03, Security 2023-04-17
Linked BF Score:
0

Description

Define an X.509 extension that should explicitly be set on certificates when the clusterMembershipExtension configuration option is specified. All connecting clients that provide a certificate with that extension set to the value of clusterMembershipExtension will be treated as peer servers provided that the host server is configured to handle X.509 auth.

Attachments

Issue Links

is documented by

DOCS-15999 Investigate changes in SERVER-74999: Create configuration file option for custom X.509 extension for cluster membership

Closed

is duplicated by

SERVER-14655 x.509 certificate authentication requires O,OU to differ between client and server

Closed

Activity

People

Assignee:: Sara Golemon

Reporter:: Varun Ravichandran

Participants:: Githook User, Sara Golemon, Varun Ravichandran, xgen-buildbaron-user

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Dates

Created:: Mar 17 2023 04:43:35 PM UTC

Updated:: Oct 29 2023 09:24:42 PM UTC

Resolved:: Apr 03 2023 08:35:18 PM UTC