-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
Server Security
-
None
-
3
-
None
-
None
-
None
-
None
-
None
-
None
With Let's Encrypt shutting down OCSP, we should test that OCSP shutdown has no negative affect on mongod.
Add tests to ensure mongod handles transitioning from certificates with OCSP to ones without.
Test scenario 1:
1. Server starts with OCSP
2. Server rotates to certificate without OCSP
3. Ensure server does not crash and continues to work with TLS
Test scenario 2:
1. Server starts with OCSP
2. OCSP server does not respond
3. Ensure server does not crash and continues to work with TLS