[DOCS-12051] Docs for SERVER-36919: Add server setParameter tlsWithholdClientCertificate (bool) Created: 12/Sep/18  Updated: 13/Nov/23  Resolved: 12/Oct/18

Status: Closed
Project: Documentation
Component/s: manual, Server
Affects Version/s: None
Fix Version/s: 4.0.3, 4.1.3, 3.6.9, 3.4.18, Server_Docs_20231030, Server_Docs_20231106, Server_Docs_20231105, Server_Docs_20231113

Type: Task Priority: Major - P3
Reporter: Kay Kim (Inactive) Assignee: Isabella Siu (Inactive)
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Documented
documents SERVER-36919 Add server setParameter tlsWithholdCl... Closed
Participants:
Days since reply: 5 years, 12 weeks, 5 days ago
Epic Link: DOCS: 4.2 Server/Tools

 Description   

Description

Description:

When this new server parameter is specified, the mongod acting as a client during intracluster communication will NOT send its configured TLS certificate to the remote mongod.

Engineering Ticket Description:

Allow intra-cluster communications which aren't using MONGODB_X509 to establish TLS streams without using a client certificate even if one is configured for inbound connections.

Note that this setParameter will only be useful when used in connection with --tlsAllowConnectionsWithoutCertificates or similar settings which allow certificateless inbound connections.

Scope of changes

For 4.2 only:

  • add tlsWitholdClientCertificate as a setParameter option
  • Mark sslWithholdClientCertificate as a deprecated setParameter option and point to tlsWitholdClientCertificate

For 4.0.3, 3.4.18, 3.6.9:

  • add sslWithholdClientCertificate as a setParameter option


 Comments   
Comment by Githook User [ 16/Nov/18 ]

Author:

{'name': 'kay', 'email': 'kay.kim@10gen.com', 'username': 'kay-kim'}

Message: DOCS-12051: sslWithholdClientCertificate changes for backporting to 3.6.9
Branch: v3.6
https://github.com/mongodb/docs/commit/dae1da6b4f06a92af4dfa3ba431fb16e9ae02a17

Comment by Githook User [ 16/Nov/18 ]

Author:

{'name': 'Isabella Siu', 'email': 'isabellasiu@Isabellas-MacBook.local'}

Message: DOCS-12051 add setParameter tlsWithholdClientCertificate
Branch: v3.6
https://github.com/mongodb/docs/commit/240e892c115040172ca0c4e124f2464b2d5a16d5

Comment by Githook User [ 07/Nov/18 ]

Author:

{'name': 'kay', 'email': 'kay.kim@10gen.com', 'username': 'kay-kim'}

Message: DOCS-12051: sslWithholdClientCertificate changes for backporting to 3.6.9
Branch: v3.4
https://github.com/mongodb/docs/commit/a5b6924484b8f0acaebf67508a829efc44f07332

Comment by Githook User [ 07/Nov/18 ]

Author:

{'name': 'Isabella Siu', 'email': 'isabellasiu@Isabellas-MacBook.local'}

Message: DOCS-12051 add setParameter tlsWithholdClientCertificate
Branch: v3.4
https://github.com/mongodb/docs/commit/197dedc6880757ffe5ea44a37faaba70898fb8ae

Comment by Githook User [ 15/Oct/18 ]

Author:

{'name': 'kay', 'email': 'kay.kim@10gen.com', 'username': 'kay-kim'}

Message: DOCS-12051: sslWithholdClientCertificate changes for backporting to 3.6.9
Branch: v3.4.18
https://github.com/mongodb/docs/commit/e7bbb3cf0677bd809e242a94b4f615f60824d5de

Comment by Githook User [ 15/Oct/18 ]

Author:

{'name': 'Isabella Siu', 'email': 'isabellasiu@Isabellas-MacBook.local'}

Message: DOCS-12051 add setParameter tlsWithholdClientCertificate
Branch: v3.4.18
https://github.com/mongodb/docs/commit/8641d4a67a9652c4991f31a0f371256f13e80dab

Comment by Githook User [ 15/Oct/18 ]

Author:

{'name': 'kay', 'email': 'kay.kim@10gen.com', 'username': 'kay-kim'}

Message: DOCS-12051: sslWithholdClientCertificate changes for backporting to 3.6.9
Branch: v3.6.9
https://github.com/mongodb/docs/commit/1429a34079cd02bb8657c69a24d971d7c7251f8d

Comment by Githook User [ 15/Oct/18 ]

Author:

{'name': 'Isabella Siu', 'email': 'isabellasiu@Isabellas-MacBook.local'}

Message: DOCS-12051 add setParameter tlsWithholdClientCertificate
Branch: v3.6.9
https://github.com/mongodb/docs/commit/6da550196463f6421c63a9c3442e73fa90743244

Comment by Githook User [ 15/Oct/18 ]

Author:

{'name': 'kay', 'email': 'kay.kim@10gen.com', 'username': 'kay-kim'}

Message: DOCS-12051: sslWithholdClientCertificate changes for backporting to 4.0.3
Branch: v4.0
https://github.com/mongodb/docs/commit/1207bbdb380fb01814d3354ade37ae9e86b300be

Comment by Githook User [ 15/Oct/18 ]

Author:

{'name': 'kay', 'email': 'kay.kim@10gen.com', 'username': 'kay-kim'}

Message: DOCS-12051: sslWithholdClientCertificate changes for backporting to 4.0.3
Branch: v4.0
https://github.com/mongodb/docs/commit/ddb17c63f1506572cb9902c60250456663e9ef2b

Comment by Githook User [ 15/Oct/18 ]

Author:

{'name': 'Isabella Siu', 'email': 'isabellasiu@Isabellas-MacBook.local'}

Message: DOCS-12051 add setParameter tlsWithholdClientCertificate
Branch: v4.0
https://github.com/mongodb/docs/commit/bb4e92dea70092d0d075b85f05a31e0faa5ba83e

Comment by Githook User [ 15/Oct/18 ]

Author:

{'name': 'Isabella Siu', 'email': 'isabellasiu@Isabellas-MacBook.local'}

Message: DOCS-12051 add setParameter tlsWithholdClientCertificate
Branch: master
https://github.com/mongodb/docs/commit/07857b4da9d557f4b4ff4d1aec392c0531e6a4dd

Generated at Thu Feb 08 08:04:17 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.