[SERVER-23044] Fall back to system CA certs in the shell if CA file isn't provided Created: 10/Mar/16  Updated: 24/Jan/24  Resolved: 18/Apr/16

Status: Closed
Project: Core Server
Component/s: Shell
Affects Version/s: 3.2.4
Fix Version/s: 3.2.6, 3.3.5

Type: New Feature Priority: Major - P3
Reporter: Andreas Nilsson Assignee: Jonathan Reams
Resolution: Done Votes: 0
Labels: code-and-test
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
Documented
is documented by DOCS-8262 Shell Support for System Certificates Closed
Problem/Incident
causes SERVER-72839 Server skips peer certificate validat... Closed
Related
related to SERVER-28873 SSL peer certificate validation fails Closed
related to CDRIVER-1182 Load Windows trusted CA by default wh... Closed
is related to DOCS-7682 Shell will fall back on system CA cer... Closed
Backwards Compatibility: Fully Compatible
Backport Completed:
Sprint: Platforms 12 (04/01/16), Platforms 13 (04/22/16)
Participants:

 Description   

With the exception of the C/C++ drivers and the shell all other drivers fall back to some standard bundle of CA certificates.



 Comments   
Comment by Githook User [ 18/Apr/16 ]

Author:

{u'username': u'jbreams', u'name': u'Jonathan Reams', u'email': u'jbreams@mongodb.com'}

Message: SERVER-23044 Simplify window system CA setup

(cherry picked from commit f1bfcba98689943266d0269af2a8405b528d2d07)
Branch: v3.2
https://github.com/mongodb/mongo/commit/07e21d8d5fd5a7ea861ec556a756b6e61c9078ad

Comment by Githook User [ 18/Apr/16 ]

Author:

{u'username': u'jbreams', u'name': u'Jonathan Reams', u'email': u'jbreams@mongodb.com'}

Message: SERVER-23044 Add system CA keychain support for OSX

(cherry picked from commit b788596cb6a71fb8fff79e60cf538d58693f8b9f)
Branch: v3.2
https://github.com/mongodb/mongo/commit/d30472af46b87614e1af655dbb73d6531f20d843

Comment by Githook User [ 18/Apr/16 ]

Author:

{u'username': u'jbreams', u'name': u'Jonathan Reams', u'email': u'jbreams@mongodb.com'}

Message: SERVER-23044 Fall back to system CA certs if CA file isn't provided

(cherry picked from commit 6fa3f3c8b5f6592fec3151d124a40ca238a0b2d4)
Branch: v3.2
https://github.com/mongodb/mongo/commit/21e94cbb8ae4b348b412aef8e46fd774902ee302

Comment by Githook User [ 15/Apr/16 ]

Author:

{u'username': u'jbreams', u'name': u'Jonathan Reams', u'email': u'jbreams@mongodb.com'}

Message: SERVER-23044 Simplify window system CA setup
Branch: master
https://github.com/mongodb/mongo/commit/f1bfcba98689943266d0269af2a8405b528d2d07

Comment by Githook User [ 15/Apr/16 ]

Author:

{u'username': u'jbreams', u'name': u'Jonathan Reams', u'email': u'jbreams@mongodb.com'}

Message: SERVER-23044 Add system CA keychain support for OSX
Branch: master
https://github.com/mongodb/mongo/commit/b788596cb6a71fb8fff79e60cf538d58693f8b9f

Comment by David Dana [ 05/Apr/16 ]

Cool. Thanks. I'll let @Cory Mintz know.

On Mon, Apr 4, 2016 at 3:18 PM, Jonathan Reams (JIRA) <jira@mongodb.org>

Comment by Jonathan Reams [ 04/Apr/16 ]

david.dana, this is already in the next sprint, it was in the last sprint, and it was just committed to master.

Comment by David Dana [ 04/Apr/16 ]

Did this get bumped to the next sprint?

Comment by Githook User [ 04/Apr/16 ]

Author:

{u'username': u'jbreams', u'name': u'Jonathan Reams', u'email': u'jbreams@mongodb.com'}

Message: SERVER-23044 Fall back to system CA certs if CA file isn't provided
Branch: master
https://github.com/mongodb/mongo/commit/6fa3f3c8b5f6592fec3151d124a40ca238a0b2d4

Comment by Githook User [ 04/Apr/16 ]

Author:

{u'username': u'jbreams', u'name': u'Jonathan Reams', u'email': u'jbreams@mongodb.com'}

Message: Revert "SERVER-23044 Fall back to system CA certs if CA file isn't provided"

This reverts commit 22e4df34c0f7a54bbb847f0b13507d54dc0e9cbd.
Branch: master
https://github.com/mongodb/mongo/commit/af651b2a9714e0a07b90c98154f7c3dd8d012f66

Comment by Githook User [ 04/Apr/16 ]

Author:

{u'username': u'jbreams', u'name': u'Jonathan Reams', u'email': u'jbreams@mongodb.com'}

Message: SERVER-23044 Fall back to system CA certs if CA file isn't provided
Branch: master
https://github.com/mongodb/mongo/commit/22e4df34c0f7a54bbb847f0b13507d54dc0e9cbd

Generated at Thu Feb 08 04:02:12 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.