[CDRIVER-1142] Load default distribution CAs if no ca_file and ca_dir are provided Created: 01/Mar/16 Updated: 10/Aug/16 Resolved: 11/Mar/16 |
|
| Status: | Closed |
| Project: | C Driver |
| Component/s: | None |
| Affects Version/s: | 1.4.0 |
| Fix Version/s: | 1.4.0 |
| Type: | Improvement | Priority: | Major - P3 |
| Reporter: | Hannes Magnusson | Assignee: | Hannes Magnusson |
| Resolution: | Done | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||||||||||
| Epic Link: | TLS Improvements | ||||||||||||||||||||
| Description |
|
When no Certificate Authorities are provided via mongoc_ssl_opt_t.ca_file and .ca_dir we should default to the distribution default CAs. This allows users who use bought certificates signed by generally trusted certificate authority to skip setting this option, and still get the server certificate properly verified. |
| Comments |
| Comment by Githook User [ 11/Mar/16 ] |
|
Author: {u'username': u'bjori', u'name': u'Hannes Magnusson', u'email': u'bjori@php.net'}Message: |