[SERVER-29917] Alias server options starting with 'ssl' to parameters starting with 'tls' Created: 29/Jun/17  Updated: 30/Oct/23  Resolved: 06/Jul/18

Status: Closed
Project: Core Server
Component/s: Security, Usability
Affects Version/s: None
Fix Version/s: 4.1.1

Type: Improvement Priority: Major - P3
Reporter: Spencer Jackson Assignee: Gregory Noma
Resolution: Fixed Votes: 0
Labels: neweng, platforms-interns-2017, platforms_security
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Documented
is documented by DOCS-11908 Docs for SERVER-29917: Alias server o... Closed
Related
related to TOOLS-2303 Inconsistent option names for mongoim... Accepted
Backwards Compatibility: Fully Compatible
Sprint: Platforms 2018-06-18, Platforms 2018-07-02, Platforms 2018-07-16
Participants:

 Description   

Today to start the server with TLS, you may run a command like:

./mongod --sslMode requireSSL --sslPEMKeyFile server.pem

This is slightly misleading, because the server does not speak SSL, which is a deprecated protocol. We should have aliases to equivalent options which use the name "tls". This will make users understand and feel better about their security posture.



 Comments   
Comment by Githook User [ 05/Jul/18 ]

Author:

{'username': 'gregorynoma', 'name': 'Gregory Noma', 'email': 'gregory.noma@gmail.com'}

Message: SERVER-29917 Alias server options starting with 'ssl' to parameters starting with 'tls'

Add support for deprecated single names. All 'ssl' options are now
deprecated, superceded by their 'tls' counterparts. Add tests for
these options in server_options_test. Re-add functionality of
disableNonSSLConnectionLogging.
Branch: master
https://github.com/mongodb/mongo/commit/96628864b50e4d0377dd920eef647e46c5bc5db8

Generated at Thu Feb 08 04:22:09 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.