[SERVER-63948] After runtime switching from allowTLS to requireTLS cluster ssl validation can fail Created: 23/Feb/22  Updated: 21/Apr/22  Resolved: 21/Apr/22

Status: Closed
Project: Core Server
Component/s: None
Affects Version/s: None
Fix Version/s: None

Type: Bug Priority: Major - P3
Reporter: Sergey Galtsev (Inactive) Assignee: Sergey Galtsev (Inactive)
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Attachments: File 5.0-mms-automation-logs-only.tgz    
Issue Links:
Depends
Operating System: ALL
Sprint: Security 2022-04-18, Security 2022-05-02
Participants:

 Description   

When TLS mode is modified during runtime, it is possible that node will cease to connect to master with "SSL peer certificate validation failed: self signed certificate in certificate chain"



 Comments   
Comment by Sergey Galtsev (Inactive) [ 21/Apr/22 ]

The issue could not be reproduced outside cloud test. I added a test into our framework to verify runtime switching on a cluster, and it passes.

Comment by Githook User [ 21/Apr/22 ]

Author:

{'name': 'sergey.galtsev', 'email': 'sergey.galtsev@mongodb.com', 'username': 'brushless-glitch'}

Message: SERVER-63948 test runtime cluster TLS transition
Branch: master
https://github.com/mongodb/mongo/commit/da3e7bfa8b85ecbc92d58a3c517c81fd5382a93c

Generated at Thu Feb 08 05:59:05 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.