[DRIVERS-455] Document how to use the latest TLS protocols Created: 15/Feb/18  Updated: 28/Oct/23  Resolved: 23/May/18

Status: Closed
Project: Drivers
Component/s: None
Fix Version/s: None

Type: New Feature Priority: Critical - P2
Reporter: Rathi Gnanasekaran Assignee: Unassigned
Resolution: Fixed Votes: 0
Labels: newdriver
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
depends on CDRIVER-2519 Document how to use the latest TLS pr... Closed
depends on CSHARP-2200 Document how to use the latest TLS pr... Closed
depends on RUBY-1303 Document how to use the latest TLS pr... Closed
depends on CXX-1519 Document how to use the latest TLS pr... Closed
depends on GODRIVER-260 Document how to use the latest TLS pr... Closed
depends on JAVA-2789 Document how to use the latest TLS pr... Closed
depends on MOTOR-200 Document how to use the latest TLS pr... Closed
depends on NODE-1345 Document how to use the latest TLS pr... Closed
depends on PHPC-1129 Document how to use the latest TLS pr... Closed
depends on PYTHON-1485 Document how to use the latest TLS pr... Closed
depends on RUST-80 Document how to use the latest TLS pr... Closed
Epic Link: PRODUCT-774
Driver Compliance:
Key Status/Resolution FixVersion
NODE-1345 Won't Fix
SCALA-382 Fixed
PYTHON-1485 Fixed 3.6.1
CSHARP-2200 Fixed
PERL-866 Fixed 2.0.0
RUBY-1303 Fixed
JAVA-2789 Fixed 3.7.0
CXX-1519 Fixed 3.3.0-rc0
PHPC-1129 Won't Fix
MOTOR-200 Fixed 1.2.3
GODRIVER-260 Works as Designed
CDRIVER-2519 Fixed 1.10.0
RUST-80 Works as Designed
SWIFT-434 Fixed 1.0.0-rc1

 Description   

Atlas will be disabling support for TLSv1.0 soon. Drivers need to document how to get support for TLS >= 1.1 on a user's OS of choice, and document where it's just not possible. The most important OSes in this case are macOS, Windows, and Linux (though the directions on Linux likely apply to all non-macOS Unix flavors).

For example, the Python interpreters Apple ships on macOS older than 10.13 are built against OpenSSL 0.9.8zh, which doesn't support anything better than TLSv1.0. So the Python driver TLS docs will recommend installing a Python version from python.org to work around the problem. The Ruby driver has a similar problem and might recommend installing Ruby from homebrew or something similar.



 Comments   
Comment by Bernie Hackett [ 27/Feb/18 ]

The text in this Python driver commit should be used as a template. Change the language specific text to suit your language needs and limitations.

https://github.com/mongodb/mongo-python-driver/commit/e7e483311286b718556e2fdab0954ebbacdb2317

Generated at Thu Feb 08 08:21:34 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.