<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Wed Feb 07 22:38:34 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[COMPASS-5140] Cannot connect to server with Let&apos;s Encrypt certs.</title>
                <link>https://jira.mongodb.org/browse/COMPASS-5140</link>
                <project id="13182" key="COMPASS">Compass </project>
                    <description>&lt;h3&gt;&lt;a name=&quot;ProblemStatement%2FRationale&quot;&gt;&lt;/a&gt;&lt;b&gt;Problem Statement/Rationale&lt;/b&gt;&lt;/h3&gt;

&lt;p&gt;Our server is using certificates from Let&apos;s Encrypt, but when I try to connect it hangs for a minute or so, before finally giving up with &apos;certificate has expired&apos;.&lt;/p&gt;

&lt;p&gt;Could this be caused by the recent expiry of the Let&apos;s Encrypt root certificates? I believe this was working before, though it&apos;s been a while since I last connected so I can&apos;t tell for sure.&lt;/p&gt;

&lt;p&gt;I&apos;m using the SSL value &apos;System CA / Atlas Deployment&apos;, but only &apos;Unvalidated (insecure)&apos; works.&lt;/p&gt;

&lt;p&gt;Is there any way to verify if this is indeed caused by the expiry of the Let&apos;s Encrypt Root Cert?&lt;/p&gt;
&lt;h3&gt;&lt;a name=&quot;StepstoReproduce&quot;&gt;&lt;/a&gt;&lt;b&gt;Steps to Reproduce&lt;/b&gt;&lt;/h3&gt;

&lt;p&gt;&lt;font color=&quot;#172b4d&quot;&gt;It&apos;s a bit of a lengthy setup, but the gist of it is that we have a DigitalOcean droplet with MongoDB installed. After fetching certs with certbot, a file is generated using&lt;/font&gt;&lt;/p&gt;

&lt;p&gt;&lt;font color=&quot;#172b4d&quot;&gt;&lt;tt&gt;cat /etc/letsencrypt/live/example.com/fullchain.pem /etc/letsencrypt/live/example.com/privkey.pem &amp;gt; /etc/ssl/mongo.pem&lt;/tt&gt;&lt;/font&gt;&lt;/p&gt;

&lt;p&gt;This file is referenced in mongod.conf:&lt;/p&gt;

&lt;p&gt;&lt;tt&gt;net:&lt;/tt&gt;&lt;br/&gt;
&lt;tt&gt;&#160; tls:&lt;/tt&gt;&lt;br/&gt;
&lt;tt&gt;&#160; &#160; mode: requireTLS&lt;/tt&gt;&lt;br/&gt;
&lt;tt&gt;&#160; &#160; certificateKeyFile: /etc/ssl/mongo.pem&lt;/tt&gt;&lt;/p&gt;

&lt;p&gt;Then I try to connect to the database in Compass with SSL set to &apos;System CA / Atlas Deployment&apos;.&lt;/p&gt;
&lt;h3&gt;&lt;a name=&quot;ExpectedResults&quot;&gt;&lt;/a&gt;&lt;b&gt;Expected Results&lt;/b&gt;&lt;/h3&gt;

&lt;p&gt;&lt;font color=&quot;#505f79&quot;&gt;It connects.&lt;/font&gt;&lt;/p&gt;
&lt;h3&gt;&lt;a name=&quot;ActualResults&quot;&gt;&lt;/a&gt;&lt;b&gt;Actual Results&lt;/b&gt;&lt;/h3&gt;

&lt;p&gt;&lt;font color=&quot;#505f79&quot;&gt;&apos;certificate has expired&apos;&lt;/font&gt;&lt;/p&gt;

&lt;p&gt;&#160;&lt;/p&gt;</description>
                <environment>MongoDB Compass 1.28.4&lt;br/&gt;
macOS 11.6</environment>
        <key id="1890118">COMPASS-5140</key>
            <summary>Cannot connect to server with Let&apos;s Encrypt certs.</summary>
                <type id="1" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14703&amp;avatarType=issuetype">Bug</type>
                                            <priority id="2" iconUrl="https://jira.mongodb.org/images/icons/priorities/critical.svg">Critical - P2</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="13201">Fixed</resolution>
                                        <assignee username="-1">Unassigned</assignee>
                                    <reporter username="jespertheend@gmail.com">Jesper van den Ende</reporter>
                        <labels>
                    </labels>
                <created>Tue, 5 Oct 2021 14:27:58 +0000</created>
                <updated>Sun, 29 Oct 2023 02:39:37 +0000</updated>
                            <resolved>Tue, 9 Nov 2021 15:09:05 +0000</resolved>
                                    <version>1.28.4</version>
                                    <fixVersion>1.29.4</fixVersion>
                                    <component>Compass</component>
                    <component>Connectivity</component>
                        <due></due>
                            <votes>2</votes>
                                    <watches>6</watches>
                                                                                                                <comments>
                            <comment id="4145222" author="jespertheend@gmail.com" created="Mon, 25 Oct 2021 13:56:21 +0000"  >&lt;p&gt;Thanks!&lt;/p&gt;

&lt;p&gt;I can confirm this fixed the issue for me on macOS&#160;&lt;img class=&quot;emoticon&quot; src=&quot;https://jira.mongodb.org/images/icons/emoticons/thumbs_up.png&quot; height=&quot;16&quot; width=&quot;16&quot; align=&quot;absmiddle&quot; alt=&quot;&quot; border=&quot;0&quot;/&gt;&lt;/p&gt;</comment>
                            <comment id="4145187" author="JIRAUSER1256529" created="Mon, 25 Oct 2021 13:44:13 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=jespertheend%40gmail.com&quot; class=&quot;user-hover&quot; rel=&quot;jespertheend@gmail.com&quot;&gt;jespertheend@gmail.com&lt;/a&gt; Sorry, my bad! That&apos;s an internal link at this point still. The release artifacts for this (1.29.0-beta.4) are available here though:&lt;/p&gt;

&lt;p&gt;macOS:&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/MongoDB%20Compass%20Beta.dmg&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/MongoDB%20Compass%20Beta.dmg&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/MongoDB%20Compass%20Beta.zip&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/MongoDB%20Compass%20Beta.zip&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;RHEL:&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/mongodb-compass-beta-1.29.0-beta.4-rhel-x64.tar.gz&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/mongodb-compass-beta-1.29.0-beta.4-rhel-x64.tar.gz&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/mongodb-compass-beta-1.29.0-beta.4.x86_64.rpm&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/mongodb-compass-beta-1.29.0-beta.4.x86_64.rpm&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Ubuntu:&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/mongodb-compass-beta-1.29.0-beta.4-linux-x64.tar.gz&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/mongodb-compass-beta-1.29.0-beta.4-linux-x64.tar.gz&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/mongodb-compass-beta_1.29.0~beta.4_amd64.deb&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/mongodb-compass-beta_1.29.0~beta.4_amd64.deb&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Windows:&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/MongoDB%20Compass%20Beta-windows.zip&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/MongoDB%20Compass%20Beta-windows.zip&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/MongoDB%20Compass%20BetaSetup.exe&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/MongoDB%20Compass%20BetaSetup.exe&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/MongoDBCompassBeta-1.29.0-beta4-full.nupkg&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/MongoDBCompassBeta-1.29.0-beta4-full.nupkg&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/MongoDBCompassBeta.msi&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://mciuploads.s3.amazonaws.com/10gen-compass-testing/1e4b64d36b1f72cc435aabdcf9f3017d6e404f46/MongoDBCompassBeta.msi&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&#160;&lt;/p&gt;</comment>
                            <comment id="4145137" author="jespertheend@gmail.com" created="Mon, 25 Oct 2021 13:26:21 +0000"  >&lt;p&gt;The link doesn&apos;t work, am I missing something?&lt;/p&gt;

&lt;p&gt;There&apos;s a few other releases but they only contain the source code.&lt;/p&gt;</comment>
                            <comment id="4141905" author="JIRAUSER1256529" created="Fri, 22 Oct 2021 13:44:30 +0000"  >&lt;p&gt;Sorry it took a while, but here&apos;s the beta version referenced above: &lt;a href=&quot;https://github.com/mongodb-js/compass/releases/tag/untagged-35651217119320dab8cd&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb-js/compass/releases/tag/untagged-35651217119320dab8cd&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="4104775" author="jespertheend@gmail.com" created="Wed, 6 Oct 2021 10:55:28 +0000"  >&lt;p&gt;Thanks for the info Anna! Good to know that this is indeed caused by the root expiration.&lt;/p&gt;</comment>
                            <comment id="4104703" author="JIRAUSER1256529" created="Wed, 6 Oct 2021 10:12:47 +0000"  >&lt;p&gt;Hi &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=jespertheend%40gmail.com&quot; class=&quot;user-hover&quot; rel=&quot;jespertheend@gmail.com&quot;&gt;jespertheend@gmail.com&lt;/a&gt;, thanks for the report! Yes, this is due to the letsencrypt root certificate expiration, and I think you&#8217;re correct in that using &quot;Unvalidated (insecure)&quot; is the (unfortunate) main workaround here for the time being.&lt;/p&gt;

&lt;p&gt;We are planning to release a beta version of Compass next week that should address this &#8211; you can follow COMPASS-5125 for progress on that.&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10011">
                    <name>Depends</name>
                                            <outwardlinks description="depends on">
                                                        </outwardlinks>
                                                        </issuelinktype>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                            <outwardlinks description="related to">
                                        <issuelink>
            <issuekey id="1097203">COMPASS-4098</issuekey>
        </issuelink>
                            </outwardlinks>
                                                        </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                <customfield id="customfield_10050" key="com.atlassian.jira.toolkit:comments">
                        <customfieldname># Replies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>6.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_13552" key="com.go2group.jira.plugin.crm:crm_generic_field">
                        <customfieldname>Case</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue><![CDATA[[5002K00000yW7vTQAS]]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10055" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>Date of 1st Reply</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Wed, 6 Oct 2021 10:12:47 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10052" key="com.atlassian.jira.toolkit:dayslastcommented">
                        <customfieldname>Days since reply</customfieldname>
                        <customfieldvalues>
                                        2 years, 15 weeks, 2 days ago
    
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18254" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Dependencies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue><![CDATA[<s><a href='https://jira.mongodb.org/browse/COMPASS-5125'>COMPASS-5125</a></s>]]></customfieldvalue>


                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10257" key="com.atlassian.jira.plugin.system.customfieldtypes:radiobuttons">
                        <customfieldname>Documentation Changes</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="11861"><![CDATA[Not Needed]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10057" key="com.atlassian.jira.toolkit:lastusercommented">
                        <customfieldname>Last comment by Customer</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>true</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10056" key="com.atlassian.jira.toolkit:lastupdaterorcommenter">
                        <customfieldname>Last commenter</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>luke.bonanomi@mongodb.com</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_11151" key="com.atlassian.jira.toolkit:LastCommentDate">
                        <customfieldname>Last public comment date</customfieldname>
                        <customfieldvalues>
                            2 years, 15 weeks, 2 days ago
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_10051" key="com.atlassian.jira.toolkit:participants">
                        <customfieldname>Participants</customfieldname>
                        <customfieldvalues>
                                        <customfieldvalue>anna.henningsen@mongodb.com</customfieldvalue>
            <customfieldvalue>jespertheend@gmail.com</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_14254" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Product Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|i04baf:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hzo23z:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10053" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>Time In Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_14350" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>serverRank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|i03xfr:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>