[CSHARP-2278] Update SSL Documentation regarding default certificate revocation checking behavior Created: 25/May/18  Updated: 31/Mar/22

Status: Backlog
Project: C# Driver
Component/s: Documentation
Affects Version/s: None
Fix Version/s: None

Type: Improvement Priority: Minor - P4
Reporter: Vincent Kam (Inactive) Assignee: Unassigned
Resolution: Unresolved Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
is related to CSHARP-2279 Disable certificate revocation checki... Closed
Case:

 Description   

The C# Driver currently enables certificate revocation checking by default (https://github.com/mongodb/mongo-csharp-driver/blob/ec74978f7e827515f29cc96fba0c727828e8df7c/src/MongoDB.Driver.Core/Core/Configuration/SslStreamSettings.cs#L53), in contrast to the shell and the Python driver. This is also in contrast to the defaults for SslStream (see https://docs.microsoft.com/en-us/dotnet/api/system.net.security.sslstream.authenticateasclient?view=netframework-4.7.2#System_Net_Security_SslStream_AuthenticateAsClient_System_String_ and https://docs.microsoft.com/en-us/dotnet/api/system.net.security.sslstream.authenticateasclient?view=netframework-4.7.2#System_Net_Security_SslStream_AuthenticateAsClient_System_String_). This has caused some confusion (see https://jira.mongodb.org/browse/HELP-6587). This divergence from the .NET defaults and the behavior of other drivers/the shell should be documented.

 


Generated at Wed Feb 07 21:42:06 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.