|
Output from a mongod log where another replica set member presents a tlsClusterFile that is < tlsX509ExpirationWarningThresholdDays:
2020-01-24T14:27:22.382+0000 W NETWORK [conn6] Peer certificate 'CN=RKMongoServerBaker,OU=RKMongoTestServers,O=RKMongoTestOrg,L=NewYork,ST=NewYork,C=US' expires in 19d
|
2020-01-24T14:27:22.382+0000 I NETWORK [conn6] received client metadata from 127.0.0.1:52528 conn6: { driver: { name: "NetworkInterfaceTL", version: "4.3.2-18-gb336760" }, os: { type: "Linux", name: "Ubuntu", architecture: "x86_64", version: "18.04" } }
|
2020-01-24T14:27:22.384+0000 I NETWORK [listener] connection accepted from 127.0.0.1:52530 #7 (4 connections now open)
|
2020-01-24T14:27:22.398+0000 W NETWORK [conn7] Peer certificate 'CN=RKMongoServerBaker,OU=RKMongoTestServers,O=RKMongoTestOrg,L=NewYork,ST=NewYork,C=US' expires in 19d
|
2020-01-24T14:27:22.398+0000 I NETWORK [conn7] received client metadata from 127.0.0.1:52530 conn7: { driver: { name: "MongoDB Internal Client", version: "4.3.2-18-gb336760" }, os: { type: "Linux", name: "Ubuntu", architecture: "x86_64", version: "18.04" } }
|
2020-01-24T14:27:23.067+0000 I NETWORK [conn7] end connection 127.0.0.1:52530 (3 connections now open)
|
2020-01-24T14:27:23.067+0000 I NETWORK [listener] connection accepted from 127.0.0.1:52532 #8 (4 connections now open)
|
2020-01-24T14:27:23.080+0000 W NETWORK [conn8] Peer certificate 'CN=RKMongoServerBaker,OU=RKMongoTestServers,O=RKMongoTestOrg,L=NewYork,ST=NewYork,C=US' expires in 19d
|
2020-01-24T14:27:23.080+0000 I NETWORK [conn8] received client metadata from 127.0.0.1:52532 conn8: { driver: { name: "NetworkInterfaceTL", version: "4.3.2-18-gb336760" }, os: { type: "Linux", name: "Ubuntu", architecture: "x86_64", version: "18.04" } }
|
2020-01-24T14:27:24.077+0000 I REPL [ReplCoord-1] Member 127.0.0.1:27200 is now in state SECONDARY
|
Note that we throw the Peer certificate warning per incoming from the member mongod, resulting in multiple warnings in the logs. I only tested this in a small replica set, but this might be more dramatic in a 3+ member replica set or sharded cluster where multiple members reach near-expiry at the same time.
|