[CDRIVER-1142] Load default distribution CAs if no ca_file and ca_dir are provided Created: 01/Mar/16  Updated: 10/Aug/16  Resolved: 11/Mar/16

Status: Closed
Project: C Driver
Component/s: None
Affects Version/s: 1.4.0
Fix Version/s: 1.4.0

Type: Improvement Priority: Major - P3
Reporter: Hannes Magnusson Assignee: Hannes Magnusson
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
is depended on by CDRIVER-1182 Load Windows trusted CA by default wh... Closed
Related
is related to CDRIVER-749 NativeTLS: Don't depend on OpenSSL on... Closed
is related to DRIVERS-302 Test connections to Mango Closed
Epic Link: TLS Improvements

 Description   

When no Certificate Authorities are provided via mongoc_ssl_opt_t.ca_file and .ca_dir we should default to the distribution default CAs.

This allows users who use bought certificates signed by generally trusted certificate authority to skip setting this option, and still get the server certificate properly verified.



 Comments   
Comment by Githook User [ 11/Mar/16 ]

Author:

{u'username': u'bjori', u'name': u'Hannes Magnusson', u'email': u'bjori@php.net'}

Message: CDRIVER-1142: Use distro trusted CAs as defaults if no CA explicitly provided
Branch: master
https://github.com/mongodb/mongo-c-driver/commit/b4b63814dc948d5146f52da839e80ddcc7c7416b

Generated at Wed Feb 07 21:11:41 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.