[DOCS-11426] Docs for SERVER-32980: Add certificate selector for Apple for SecureTransport Created: 08/Mar/18  Updated: 29/Oct/23  Resolved: 27/Jun/18

Status: Closed
Project: Documentation
Component/s: manual
Affects Version/s: None
Fix Version/s: 3.7.2, 3.7.3

Type: Task Priority: Major - P3
Reporter: Kay Kim (Inactive) Assignee: Susan Kerschbaumer (Inactive)
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Documented
documents SERVER-32980 Add certificate selector command-line... Closed
Duplicate
is duplicated by DOCS-11522 Docs for SERVER-34139: Add certificat... Closed
Related
related to DOCS-11526 Docs for SERVER-33832: Change Windows... Closed
Participants:
Days since reply: 5 years, 6 days ago
Epic Link: DOCS: 4.0 Server
Story Points: 1

 Description   

Documentation Request Summary:

This implements the user-facing piece of PM-305's certificate selector specification. Apple and Windows implementations still need to handle the values which will come in later commits.

Engineering Ticket Description:

The new option will be called a “Certificate Selector” for each option used to read a PEM file today. No new options will be used to read CA certs or CRL lists as these will be retrieved from the system certificate store by the native SSL library automatically. Both platforms will check OCSP for CRLs.

Existing Option New Option Config Name
sslPEMKeyFile sslCertificateSelector net.ssl.CertificateSelector
sslClusterFile sslClusterCertificateSelector net.ssl.ClusterCertificateSelector
kmipClientCertificateFile kmipClientCertificateSelector security.kmip.ClientCertificateSelector

It is a startup error to specify a certificate selector and file for the same parameter.

The format of the certificate selector is:

<certificate property>=<value>

The following certificate properties are supported:

Property Value Description
subject An ASCII string Matches Subject Name
thumbprint Hex string Matches Thumbprint
serial Hex string Matches Serial Number

The property names are case-sensitive. For subject name, the match is exact, case-sensitive string match. Only one property may be specified in a search. In the case of two or more certificates matching the same search criteria, the certificate returned is undefined, and depends on the OS behavior.

Scope of changes:

 

The approach will be to add a reference to the Apple/Windows options everytime we reference configuring a .pem file. Possible implicated files are:

https://docs.mongodb.com/manual/tutorial/configure-ssl/

https://docs.mongodb.com/manual/tutorial/configure-ssl-clients/index.html

https://docs.mongodb.com/manual/tutorial/upgrade-cluster-to-ssl/index.html

 

Impact to other docs outside of this product:

MVP:

Resources:



 Comments   
Comment by Githook User [ 07/Feb/19 ]

Author:

{'name': 'Kay Kim', 'email': 'kay.kim@mongodb.com'}

Message: DOCS-11426: tweak macOS/windows certificate store blurb in the upgrade to ssl tutorial
Branch: master
https://github.com/mongodb/docs/commit/44c24155da377f4ddc29c2605294d49294c9cad5

Comment by Githook User [ 07/Feb/19 ]

Author:

{'name': 'Kay Kim', 'email': 'kay.kim@mongodb.com'}

Message: DOCS-11426: tweak macOS/windows certificate store blurb in the upgrade to ssl tutorial
Branch: v4.0
https://github.com/mongodb/docs/commit/956a4e21dd6386683d3330b9f9062fe9d6ab4e3e

Comment by Githook User [ 26/Jun/18 ]

Author:

{'username': 'kay-kim', 'name': 'kay', 'email': 'kay.kim@10gen.com'}

Message: DOCS-11426: old includes are in tutorials
Branch: master
https://github.com/mongodb/docs/commit/da34a31afee75fcb6c7afa6ca9c3f8ab85669e2c

Comment by Githook User [ 26/Jun/18 ]

Author:

{'username': 'kay-kim', 'name': 'kay', 'email': 'kay.kim@10gen.com'}

Message: DOCS-11426: build warning on code-block
Branch: master
https://github.com/mongodb/docs/commit/c0ed8344f560e58a4e03903339730c2a522a1522

Comment by Githook User [ 26/Jun/18 ]

Author:

{'username': 'kay-kim', 'name': 'kay', 'email': 'kay.kim@10gen.com'}

Message: DOCS-11426: merge issue
Branch: master
https://github.com/mongodb/docs/commit/dc5e554f09155642553c019c96da0ea782b74dce

Comment by Githook User [ 26/Jun/18 ]

Author:

{'username': 'skerschb', 'name': 'skerschb', 'email': 'sue.kerschbaumer@10gen.com'}

Message: DOCS-11426: Windows and Mac secure store
Branch: master
https://github.com/mongodb/docs/commit/89f3e68dcc92eb1ed4113b038fff9016a77eab55

Comment by Githook User [ 26/Jun/18 ]

Author:

{'username': 'skerschb', 'name': 'skerschb', 'email': 'sue.kerschbaumer@10gen.com'}

Message: DOCS-11426: Windows and Mac secure store
Branch: master
https://github.com/mongodb/docs/commit/6dd5d1066c6f2ddd3df2e20d960c149d0d117263

Generated at Thu Feb 08 08:02:47 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.