[CDRIVER-1307] Enforce client certificate in evergreen Created: 26/May/16 Updated: 10/Aug/16 Resolved: 27/May/16 |
|
| Status: | Closed |
| Project: | C Driver |
| Component/s: | None |
| Affects Version/s: | 1.4.0 |
| Fix Version/s: | 1.4.0 |
| Type: | Bug | Priority: | Major - P3 |
| Reporter: | Hannes Magnusson | Assignee: | Hannes Magnusson |
| Resolution: | Done | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Epic Link: | C Driver in Evergreen |
| Description |
|
Currently our mongo-orchestration config uses "sslWeakCertificateValidation": true, which means we never actually test if we provide client certificates properly to the server. We should remove this option, and instead enable sslMode: requireSSL, which will make the server reject the connection if we don't provide it. |
| Comments |
| Comment by Githook User [ 27/May/16 ] |
|
Author: {u'username': u'bjori', u'name': u'Hannes Magnusson', u'email': u'bjori@php.net'}Message: |