[SERVER-36919] Add server setParameter tlsWithholdClientCertificate (bool) Created: 29/Aug/18  Updated: 29/Oct/23  Resolved: 10/Sep/18

Status: Closed
Project: Core Server
Component/s: None
Affects Version/s: None
Fix Version/s: 3.4.18, 3.6.9, 4.0.3, 4.1.3

Type: Improvement Priority: Major - P3
Reporter: Sara Golemon Assignee: Sara Golemon
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Backports
Documented
is documented by DOCS-12051 Docs for SERVER-36919: Add server set... Closed
Related
Backwards Compatibility: Fully Compatible
Backport Requested:
v4.0, v3.6, v3.4
Sprint: Platforms 2018-09-10, Platforms 2018-09-24
Participants:

 Description   

Allow intra-cluster communications which aren't using MONGODB_X509 to establish TLS streams without using a client certificate even if one is configured for inbound connections.

Note that this setParameter will only be useful when used in connection with --tlsAllowConnectionsWithoutCertificates or similar settings which allow certificateless inbound connections.



 Comments   
Comment by Githook User [ 20/Sep/18 ]

Author:

{'name': 'Sara Golemon', 'email': 'sara.golemon@mongodb.com', 'username': 'sgolemon'}

Message: SERVER-36919 Add server setParameter tlsSuppressClientCertificate

(cherry picked from commit 1070aa3880ac73bc1923b44a372c61c209a35f61)

Set parameter name mapped from tls* to ssl*
Branch: v3.4
https://github.com/mongodb/mongo/commit/4fce55e175bc31018256608220afca0ed44b309a

Comment by Githook User [ 20/Sep/18 ]

Author:

{'name': 'Sara Golemon', 'email': 'sara.golemon@mongodb.com', 'username': 'sgolemon'}

Message: SERVER-36919 Add server setParameter tlsSuppressClientCertificate

(cherry picked from commit 1070aa3880ac73bc1923b44a372c61c209a35f61)

Set parameter name mapped from tls* to ssl*
Branch: v3.6
https://github.com/mongodb/mongo/commit/9d5e487a676e6265f1fd092108d325817d97b2c0

Comment by Githook User [ 20/Sep/18 ]

Author:

{'name': 'Sara Golemon', 'email': 'sara.golemon@mongodb.com', 'username': 'sgolemon'}

Message: SERVER-36919 Add server setParameter tlsSuppressClientCertificate

(cherry picked from commit 1070aa3880ac73bc1923b44a372c61c209a35f61)

Set parameter name mapped from tls* to ssl*
Branch: v4.0
https://github.com/mongodb/mongo/commit/62ddf96f847d5bbc301aad4fab94977671af417c

Comment by Githook User [ 10/Sep/18 ]

Author:

{'name': 'Sara Golemon', 'email': 'sara.golemon@mongodb.com', 'username': 'sgolemon'}

Message: SERVER-36919 Add server setParameter tlsSuppressClientCertificate
Branch: master
https://github.com/mongodb/mongo/commit/1070aa3880ac73bc1923b44a372c61c209a35f61

Generated at Thu Feb 08 04:44:27 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.