Uploaded image for project: 'MongoDB Database Tools'
  1. MongoDB Database Tools
  2. TOOLS-1948

Use Go-native TLS dialer on platforms with openssl 0.9.x

    XMLWordPrintableJSON

Details

    • Task
    • Status: Closed
    • Critical - P2
    • Resolution: Fixed
    • None
    • 3.7.4, 3.4.15, 3.6.5, 4.0.0-rc0
    • All Tools
    • None

    Description

      Atlas is likely to start offering a TLS 1.2 only mode. This isn't possible with the system openssl on macosx or the openssl with suse11 (or RHEL 5.5). As the openssl wrapper is needed for FIPS support and we don't support FIPS on older versions of openssl anyway, we should implement a Go-native TLS dialer on platforms with 0.9.x.

      We can identify ones that have 'openssl_pre_1.0' as a Go build tag – which we're already asking for in SERVER-32922 for the wrapper. After this change, that build tag will turn off the wrapper and turn on the Go-native TLS dialer.

      The Go-native TLS dialer can likely be adapted from the one that exists for the new Go driver.

      Attachments

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. TOOLS-2587 sslAllowInvalidHostnames bypass ssl/tls server certification validation entirely

          • Major - P3 - Major loss of function.
          • Closed
          is depended on by

          Task - A task that needs to be done. TOOLS-1982 Automate testing TLS 1.1 or 1.2 connections on all platforms

          • Major - P3 - Major loss of function.
          • Closed
          related to

          Task - A task that needs to be done. SERVER-32922 Evergreen Go tooltags need 'openssl_pre_1.0' on variants with openssl 0.9.x

          • Major - P3 - Major loss of function.
          • Closed

          Task - A task that needs to be done. SERVER-34742 Stop running ssl_cert_password.js on OS X

          • Major - P3 - Major loss of function.
          • Closed

          Activity

            People

              david.golden@mongodb.com David Golden
              david.golden@mongodb.com David Golden
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: