[SERVER-47829] CentOs 7.X, 64 bit, MongoDB Community Edition 4.2.6 Created: 28/Apr/20  Updated: 06/Dec/22  Resolved: 29/Apr/20

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: None
Fix Version/s: None

Type: Bug Priority: Major - P3
Reporter: Narayana Basetty Assignee: Backlog - Triage Team
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Attachments: File ca.sh     File client.sh     File openssl-test-ca.cnf     File openssl-test-client.cnf     File openssl-test-server.cnf     File server.sh    
Assigned Teams:
Server Triage
Operating System: ALL
Steps To Reproduce:

step1:

https://docs.mongodb.com/manual/appendix/security/appendixA-openssl-ca/

step2: 

https://docs.mongodb.com/manual/appendix/security/appendixB-openssl-server/

step3:

https://docs.mongodb.com/manual/appendix/security/appendixC-openssl-client/

 

Participants:

 Description   

Hi,

ENV: CentOs 7.X, 64 bit, MongoDB Community Edition 4.2.6

 

I have followed this link and attached the ca, server, client conf files

https://docs.mongodb.com/manual/appendix/security/

 

Server and Client fails connection

Server

bin/mongod --auth --bind_ip 10.0.2.15 --port 27017 --dbpath /data/node01 \
--tlsMode requireTLS --tlsAllowInvalidHostnames --tlsAllowInvalidCertificates \
--tlsCertificateKeyFile test-server1.pem --tlsCAFile test-ca.pem

Client

bin/mongo --host 10.0.2.15 --port 27017 -u madmin -p xxxxx \
--tls --tlsCertificateKeyFile test-client.pem --tlsCAFile test-ca.pem

 

 

client error log

=========

 

akeFailed: SSL peer certificate validation failed: certificate signature failure src/mongo/scripting/mozjs/mongo.cpp 832
2020-04-28T12:27:24.043-0400 E QUERY [js] Error: couldn't connect to server 10.0.2.15:27017, connection attempt failed: SSLHandshakeFailed: SSL peer certificate validation failed: certificate signature failure :
connect@src/mongo/shell/mongo.js:341:17
@(connect):2:6
2020-04-28T12:27:24.043-0400 D1 - [js] User Assertion: Location12513: connect failed src/mongo/shell/shell_utils.cpp 418
2020-04-28T12:27:24.044-0400 I QUERY [js] MozJS GC prologue heap stats - total: 4391668 limit: 0
2020-04-28T12:27:24.056-0400 I QUERY [js] MozJS GC epilogue heap stats - total: 3452 limit: 0
2020-04-28T12:27:24.059-0400 D1 - [main] User Assertion: Location12513: connect failed src/mongo/scripting/mozjs/proxyscope.cpp 320
2020-04-28T12:27:24.065-0400 F - [main] exception: connect failed
2020-04-28T12:27:24.065-0400 E - [main] exiting with code 1



 Comments   
Comment by Carl Champain (Inactive) [ 29/Apr/20 ]

Hi narayanab16@gmail.com,

The SERVER project is for bugs and feature suggestions for the MongoDB server. As this ticket does not appear to be a bug, I will now close it. If you need assistance troubleshooting, I encourage you to ask our community by posting on the MongoDB Community Forums or on Stack Overflow with the mongodb tag.

Kind regards,
Carl
 

Generated at Thu Feb 08 05:15:21 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.