[SERVER-37415] Make SCons build MongoDB with ssl by default Created: 01/Oct/18 Updated: 29/Oct/23 Resolved: 12/Nov/18 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | 4.1.6 |
| Type: | Improvement | Priority: | Minor - P4 |
| Reporter: | Oleg Pudeyev (Inactive) | Assignee: | Mark Benvenuto |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Backwards Compatibility: | Fully Compatible |
| Sprint: | Security 2018-11-19 |
| Participants: |
| Description |
|
https://github.com/mongodb/mongo/blob/master/docs/building.md has nothing on how to build the server with SSL support. Fortunately according to https://github.com/peters/mongodb-ssl all that's needed is to add `--ssl` option. It would be good for developer experience to have this option documented officially as well. |
| Comments |
| Comment by Githook User [ 17/Nov/18 ] |
|
Author: {'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}Message: |
| Comment by Githook User [ 13/Nov/18 ] |
|
Author: {'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}Message: |
| Comment by Githook User [ 12/Nov/18 ] |
|
Author: {'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}Message: |
| Comment by Githook User [ 12/Nov/18 ] |
|
Author: {'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}Message: |
| Comment by Githook User [ 12/Nov/18 ] |
|
Author: {'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}Message: |
| Comment by Spencer Jackson [ 15/Oct/18 ] |
|
Flipping the default seems reasonable. Windows and OS X will always have a TLS library. Most Linux distros will have OpenSSL lying around, or can easily obtain the development headers. |
| Comment by Bernie Hackett [ 01/Oct/18 ] |
|
You can also figure this out with "scons --help" |
| Comment by Andrew Morrow (Inactive) [ 01/Oct/18 ] |
|
I wonder if we should consider flipping the default for that flag. Opting out of SSL seems like it should be the explicit choice, not in. |
| Comment by Daniel Pasette (Inactive) [ 01/Oct/18 ] |
|
https://github.com/mongodb/mongo/wiki/Build-Mongodb-From-Source |