[DOCS-14153] Consider removing the recommendation to use a single CA for X.509 Created: 23/Jan/21  Updated: 30/Oct/23  Due: 29/Jan/21  Resolved: 25/Jan/21

Status: Closed
Project: Documentation
Component/s: manual, Server
Affects Version/s: None
Fix Version/s: Server_Docs_20231030

Type: Improvement Priority: Major - P3
Reporter: Dmitry Ryabtsev Assignee: Andrew Feierabend (Inactive)
Resolution: Fixed Votes: 0
Labels: quick-win
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
related to SERVER-35418 Allow specifying CAs for incoming and... Closed
Participants:
Days since reply: 3 years, 2 weeks, 2 days ago
Epic Link: DOCSP-11701
Story Points: 2

 Description   

Description

For X509 authentication mechanism we have the following text here:

For production use, your MongoDB deployment should use valid certificates generated and signed by a single certificate authority.

We should probably remove it as with SERVER-35418 it is now possible to configure completely unrelated CAs for intra-cluster and for client connections

Scope of changes

Impact to Other Docs

MVP (Work and Date)

Resources (Scope or Design Docs, Invision, etc.)



 Comments   
Comment by Githook User [ 25/Jan/21 ]

Author:

{'name': 'Andrew Feierabend', 'email': 'andrew.feierabend@mongodb.com', 'username': 'andf-mongodb'}

Message: DOCS-14153 remove single CA requirement x509
Branch: v4.2.12
https://github.com/mongodb/docs/commit/0c4666aa8e7e19408d9745484806c558d0008b40

Comment by Githook User [ 25/Jan/21 ]

Author:

{'name': 'Andrew Feierabend', 'email': 'andrew.feierabend@mongodb.com', 'username': 'andf-mongodb'}

Message: DOCS-14153 remove single CA requirement x509
Branch: v3.6
https://github.com/mongodb/docs/commit/4919dd96501b82728c40575984e2ac7e7592e508

Comment by Githook User [ 25/Jan/21 ]

Author:

{'name': 'Andrew Feierabend', 'email': 'andrew.feierabend@mongodb.com', 'username': 'andf-mongodb'}

Message: DOCS-14153 remove single CA requirement x509
Branch: v4.0
https://github.com/mongodb/docs/commit/b8c5f10d1068182052e0cde15c39f2a24989ef0f

Comment by Githook User [ 25/Jan/21 ]

Author:

{'name': 'Andrew Feierabend', 'email': 'andrew.feierabend@mongodb.com', 'username': 'andf-mongodb'}

Message: DOCS-14153 remove single CA requirement x509
Branch: v4.2
https://github.com/mongodb/docs/commit/0c4666aa8e7e19408d9745484806c558d0008b40

Comment by Githook User [ 25/Jan/21 ]

Author:

{'name': 'Andrew Feierabend', 'email': 'andrew.feierabend@mongodb.com', 'username': 'andf-mongodb'}

Message: DOCS-14153 remove single CA requirement x509
Branch: master
https://github.com/mongodb/docs/commit/b75887010efd5ee9b86ea06a41ce8cdd5fdb7aa5

Comment by Githook User [ 25/Jan/21 ]

Author:

{'name': 'Andrew Feierabend', 'email': 'andrew.feierabend@mongodb.com', 'username': 'andf-mongodb'}

Message: DOCS-14153 remove single CA requirement x509
Branch: v5.0
https://github.com/mongodb/docs/commit/c95164a1c06cf327edb5d8fedb3fd16a9bde7e96

Generated at Thu Feb 08 08:09:38 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.