[CDRIVER-2004] Add SSL Configuration options to the URI / Enable X.509 auth through URI Created: 27/Jan/17 Updated: 11/Jun/17 Resolved: 06/Feb/17 |
|
| Status: | Closed |
| Project: | C Driver |
| Component/s: | tls |
| Affects Version/s: | None |
| Fix Version/s: | 1.7.0 |
| Type: | New Feature | Priority: | Major - P3 |
| Reporter: | Hannes Magnusson | Assignee: | Hannes Magnusson |
| Resolution: | Done | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||||||||||||||
| Description |
|
Currently the only way to actually be able to connect to SSL enabled server is by calling mongoc_client_set_ssl_opts. It is insufficient to enable the ssl=true URI option as in real world scenario you have to configure the client certificate and possibly allowed ca. Since we can't provide client certificate through the URI, X.509 authentication is therefore not supported through the URI alone, and requires few lines of code to enable. |
| Comments |
| Comment by Githook User [ 06/Feb/17 ] |
|
Author: {u'username': u'bjori', u'name': u'Hannes Magnusson', u'email': u'bjori@php.net'}Message: |
| Comment by Githook User [ 06/Feb/17 ] |
|
Author: {u'username': u'bjori', u'name': u'Hannes Magnusson', u'email': u'bjori@php.net'}Message: |
| Comment by A. Jesse Jiryu Davis [ 30/Jan/17 ] |
|
Tentatively scheduled for 1.7.0. Depends on an in-progress Drivers spec for TLS options. |