Details
-
Task
-
Resolution: Fixed
-
Major - P3
-
None
-
None
-
Server Security
-
Minor Change
-
Security 2023-04-03, Security 2023-04-17
-
0
Description
Define an X.509 extension that should explicitly be set on certificates when the clusterMembershipExtension configuration option is specified. All connecting clients that provide a certificate with that extension set to the value of clusterMembershipExtension will be treated as peer servers provided that the host server is configured to handle X.509 auth.
Attachments
Issue Links
- is documented by
-
DOCS-15999 Investigate changes in SERVER-74999: Create configuration file option for custom X.509 extension for cluster membership
-
- Closed
-
- is duplicated by
-
SERVER-14655 x.509 certificate authentication requires O,OU to differ between client and server
-
- Closed
-