[COMPASS-4105] Support non-standard root ca for SSL Created: 17/Jan/20 Updated: 29/Oct/23 Resolved: 11/Mar/22 |
|
| Status: | Closed |
| Project: | Compass |
| Component/s: | Connectivity, Tech debt |
| Affects Version/s: | None |
| Fix Version/s: | 1.31.0 |
| Type: | Investigation | Priority: | Major - P3 |
| Reporter: | Lucas Hrabovsky (Inactive) | Assignee: | Anna Henningsen |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||||||||||||||
| Epic Link: | COMPASS-5198 | ||||||||||||||||||||||||
| Story Points: | 5 | ||||||||||||||||||||||||
| Documentation Changes: | Needed | ||||||||||||||||||||||||
| Documentation Changes Summary: | Similar to https://jira.mongodb.org/browse/DOCSP-21000, Compass now also supports loading certificates from the system certificate store through a checkbox in its connection form UI. (I don’t know if Compass’s TLS options are documented in general. If not, then I assume this option also doesn’t need to be documented.) |
||||||||||||||||||||||||
| Sprint: | Iteration Utica, Iteration Versailles, Iteration Wolverhampton | ||||||||||||||||||||||||
| Description |
noteshttps://www.npmjs.com/package/ssl-root-cas node-windows-root-certshttps://www.npmjs.com/package/node-windows-root-certs
win-cahttps://www.npmjs.com/package/win-ca
It's somewhat non-intuitive under any OS, but Windows differs from most of them This package is intended to fetch Root CAs from Windows' store (Trusted Root Certification Authorities) and make them available to Node.js application with minimal efforts. |
| Comments |
| Comment by Githook User [ 16/Mar/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna@addaleax.net', 'username': 'addaleax'}Message: feat(connection-form): support system CA store loading |
| Comment by Githook User [ 15/Mar/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna@addaleax.net', 'username': 'addaleax'}Message: feat(connection-form): support system CA store loading |
| Comment by Githook User [ 14/Mar/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna@addaleax.net', 'username': 'addaleax'}Message: feat(connection-form): support system CA store loading |
| Comment by Githook User [ 11/Mar/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna@addaleax.net', 'username': 'addaleax'}Message: feat(connection-form): support system CA store loading |
| Comment by Githook User [ 11/Mar/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna@addaleax.net', 'username': 'addaleax'}Message: feat(connection-form): support system CA store loading |
| Comment by Githook User [ 10/Mar/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna@addaleax.net', 'username': 'addaleax'}Message: feat(connection-form): support system CA store loading |
| Comment by Githook User [ 02/Mar/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna@addaleax.net', 'username': 'addaleax'}Message: fix(node-runtime-worker-thread): externalize system-ca and deps In order to be usable in Compass, system-ca and its addon dependencies Theoretically, it might be enough to only externalize the addons; |
| Comment by Githook User [ 02/Mar/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna@addaleax.net', 'username': 'addaleax'}Message: fix(node-runtime-worker-thread): externalize system-ca and deps In order to be usable in Compass, system-ca and its addon dependencies Theoretically, it might be enough to only externalize the addons; |
| Comment by Githook User [ 02/Mar/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna@addaleax.net', 'username': 'addaleax'}Message: feat(connection-form): support system CA store loading |
| Comment by Githook User [ 01/Mar/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna@addaleax.net', 'username': 'addaleax'}Message: feat(connection-form): support system CA store loading |
| Comment by Githook User [ 22/Feb/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna@addaleax.net', 'username': 'addaleax'}Message: feat: add support for --tlsUseSystemCA flag |
| Comment by Githook User [ 22/Feb/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna@addaleax.net', 'username': 'addaleax'}Message: feat: add support for --tlsUseSystemCA flag |
| Comment by Githook User [ 21/Feb/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna@addaleax.net', 'username': 'addaleax'}Message: feat: add support for --tlsUseSystemCA flag |
| Comment by Githook User [ 17/Feb/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna@addaleax.net', 'username': 'addaleax'}Message: feat: add support for --tlsUseSystemCA flag |