--sslPEMKeyFile and other ssl arguments require the full path when using --fork

XMLWordPrintableJSON

    • Type: Bug
    • Resolution: Done
    • Priority: Minor - P4
    • 2.5.3
    • Affects Version/s: 2.4.0-rc0
    • Component/s: Security
    • None
    • ALL
    • None
    • 3
    • None
    • None
    • None
    • None
    • None
    • None

      The path to ssl certificates has to be a full path, where as other command line options are relative to where mongod is called from.

      eg my start mongod bash script:

      #!/bin/bash
      ./bin/mongod --dbpath=./data/single --fork --logpath=./logs/single --sslPEMKeyFile=./jstests/libs/server.pem --sslCAFile=./jstests/libs/ca.pem --sslCRLFile=./jstests/libs/crl.pem --sslOnNormalPorts --sslWeakCertificateValidation --smallfiles --noprealloc --nojournal
      

      Errors with ERROR: cannot read certificate file. When I supply the full path to the certificates it works but this is different to how dbpath and logpath work.

            Assignee:
            Matt Dannenberg (Inactive)
            Reporter:
            Ross Lawley
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: