Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-8524

--sslPEMKeyFile and other ssl arguments require the full path when using --fork

    • Type: Icon: Bug Bug
    • Resolution: Done
    • Priority: Icon: Minor - P4 Minor - P4
    • 2.5.3
    • Affects Version/s: 2.4.0-rc0
    • Component/s: Security
    • Labels:
      None
    • ALL

      The path to ssl certificates has to be a full path, where as other command line options are relative to where mongod is called from.

      eg my start mongod bash script:

      #!/bin/bash
      ./bin/mongod --dbpath=./data/single --fork --logpath=./logs/single --sslPEMKeyFile=./jstests/libs/server.pem --sslCAFile=./jstests/libs/ca.pem --sslCRLFile=./jstests/libs/crl.pem --sslOnNormalPorts --sslWeakCertificateValidation --smallfiles --noprealloc --nojournal
      

      Errors with ERROR: cannot read certificate file. When I supply the full path to the certificates it works but this is different to how dbpath and logpath work.

            Assignee:
            matt.dannenberg Matt Dannenberg
            Reporter:
            ross@mongodb.com Ross Lawley
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: