<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Thu Feb 08 08:09:27 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[DOCS-14083] [OM] Update queryable snapshot/restores to disable TLSv1 and ciphers</title>
                <link>https://jira.mongodb.org/browse/DOCS-14083</link>
                <project id="10380" key="DOCS">Documentation</project>
                    <description>&lt;h2&gt;&lt;a name=&quot;Description&quot;&gt;&lt;/a&gt;Description&lt;/h2&gt;
&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/browse/CLOUDP-74113&quot; class=&quot;external-link&quot; rel=&quot;nofollow&quot;&gt;https://jira.mongodb.org/browse/CLOUDP-74113&lt;/a&gt;&lt;br/&gt;
Disable DH-1024 Ciphers for Queryable Backup ProxyServer listener&lt;br/&gt;
was resolved in Ops Manager 4.2.22 and 4.4.6&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/browse/CLOUDP-70734&quot; class=&quot;external-link&quot; rel=&quot;nofollow&quot;&gt;https://jira.mongodb.org/browse/CLOUDP-70734&lt;/a&gt;&lt;br/&gt;
Ops Manager Queryable Snapshot Proxy Server Port does not enforce minimum TLS version using mms.minimumTLSVersion&lt;br/&gt;
was resolved in 4.2.21 and 4.4.5&lt;/p&gt;

&lt;p&gt;&lt;b&gt;but&lt;/b&gt; per &lt;a href=&quot;https://jira.mongodb.org/browse/CLOUDP-70734?focusedCommentId=3526916&amp;amp;page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-3526916&quot; class=&quot;external-link&quot; rel=&quot;nofollow&quot;&gt;this comment&lt;/a&gt;&lt;br/&gt;
&quot;I backported the code however I couldn&apos;t disabled TLSv1 and ciphers by default since it will affect other customers. Please advice this client to put the following to conf-mms.properties::&lt;/p&gt;
&lt;p/&gt;
&lt;div id=&quot;syntaxplugin&quot; class=&quot;syntaxplugin&quot; style=&quot;border: 1px dashed #bbb; border-radius: 5px !important; overflow: auto; max-height: 30em;&quot;&gt;
&lt;table cellspacing=&quot;0&quot; cellpadding=&quot;0&quot; border=&quot;0&quot; width=&quot;100%&quot; style=&quot;font-size: 1em; line-height: 1.4em !important; font-weight: normal; font-style: normal; color: black;&quot;&gt;
		&lt;tbody &gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;  margin-top: 10px;   width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;brs.queryable.tls.disabledProtocols=SSLv2Hello,SSLv3,TLSv1,TLSv1.1,TLSv1.3&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;   margin-bottom: 10px;  width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;brs.queryable.tls.disabledCiphers=TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
			&lt;/tbody&gt;
&lt;/table&gt;
&lt;/div&gt;
&lt;p/&gt;

&lt;p&gt;These settings are currently undocumented and should possibly be added to the following Documentation for customers to  disable TLSv1 and ciphers for queryable snapshot/restores:&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://docs.opsmanager.mongodb.com/current/reference/configuration/index.html#queryable-snapshot-configuration&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;Ops Manager Configuration Settings &amp;gt; Queryable Snapshot Configuration&lt;/a&gt;&lt;br/&gt;
&lt;a href=&quot;https://docs.opsmanager.mongodb.com/current/reference/config/ui-settings/index.html#queryable-snapshot-configuration&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;Ops Manager Application Settings &amp;gt; Queryable Snapshot Configuration&lt;/a&gt;&lt;/p&gt;

&lt;h2&gt;&lt;a name=&quot;Scopeofchanges&quot;&gt;&lt;/a&gt;Scope of changes&lt;/h2&gt;

&lt;h2&gt;&lt;a name=&quot;ImpacttoOtherDocs&quot;&gt;&lt;/a&gt;Impact to Other Docs&lt;/h2&gt;

&lt;h2&gt;&lt;a name=&quot;MVP%28WorkandDate%29&quot;&gt;&lt;/a&gt;MVP (Work and Date)&lt;/h2&gt;

&lt;h2&gt;&lt;a name=&quot;Resources%28ScopeorDesignDocs%2CInvision%2Cetc.%29&quot;&gt;&lt;/a&gt;Resources (Scope or Design Docs, Invision, etc.)&lt;/h2&gt;
</description>
                <environment>&lt;a href=&quot;https://docs.opsmanager.mongodb.com/current/reference/configuration/index.html#queryable-snapshot-configuration&quot;&gt;https://docs.opsmanager.mongodb.com/current/reference/configuration/index.html#queryable-snapshot-configuration&lt;/a&gt;</environment>
        <key id="1581587">DOCS-14083</key>
            <summary>[OM] Update queryable snapshot/restores to disable TLSv1 and ciphers</summary>
                <type id="4" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14710&amp;avatarType=issuetype">Improvement</type>
                                            <priority id="3" iconUrl="https://jira.mongodb.org/images/icons/priorities/major.svg">Major - P3</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="13201">Fixed</resolution>
                                        <assignee username="tony.sansone@mongodb.com">Anthony Sansone</assignee>
                                    <reporter username="charles.merrill@mongodb.com">Charles Merrill</reporter>
                        <labels>
                    </labels>
                <created>Wed, 6 Jan 2021 00:05:00 +0000</created>
                <updated>Sun, 29 Oct 2023 13:54:29 +0000</updated>
                            <resolved>Thu, 18 Mar 2021 16:37:47 +0000</resolved>
                                                                    <component>Ops Manager</component>
                        <due></due>
                            <votes>0</votes>
                                    <watches>2</watches>
                                                                                                                <comments>
                            <comment id="3912815" author="xgen-internal-githook" created="Thu, 1 Jul 2021 17:27:26 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;name&apos;: &apos;Anthony Sansone&apos;, &apos;email&apos;: &apos;tony.sansone@mongodb.com&apos;, &apos;username&apos;: &apos;atsansone&apos;}
&lt;p&gt;Message: (DOCSP-15207) Backport &lt;a href=&quot;https://jira.mongodb.org/browse/DOCS-14083&quot; title=&quot;[OM] Update queryable snapshot/restores to disable TLSv1 and ciphers&quot; class=&quot;issue-link&quot; data-issue-key=&quot;DOCS-14083&quot;&gt;&lt;del&gt;DOCS-14083&lt;/del&gt;&lt;/a&gt; to v4.4 (#3635)&lt;br/&gt;
Branch: v4.4.10&lt;br/&gt;
&lt;a href=&quot;https://github.com/10gen/mms-docs/commit/f901b5c83830eefc9988d297df8fbd72981a5461&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/10gen/mms-docs/commit/f901b5c83830eefc9988d297df8fbd72981a5461&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="3714452" author="xgen-internal-githook" created="Tue, 13 Apr 2021 01:41:29 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;name&apos;: &apos;Anthony Sansone&apos;, &apos;email&apos;: &apos;tony.sansone@mongodb.com&apos;, &apos;username&apos;: &apos;atsansone&apos;}
&lt;p&gt;Message: (&lt;a href=&quot;https://jira.mongodb.org/browse/DOCS-14083&quot; title=&quot;[OM] Update queryable snapshot/restores to disable TLSv1 and ciphers&quot; class=&quot;issue-link&quot; data-issue-key=&quot;DOCS-14083&quot;&gt;&lt;del&gt;DOCS-14083&lt;/del&gt;&lt;/a&gt;) Added TLS settings for Queryable&lt;br/&gt;
Branch: feature-cloud-migration&lt;br/&gt;
&lt;a href=&quot;https://github.com/10gen/mms-docs/commit/14352ea37d6b1707c0d59fe3e74099144f6e9a4e&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/10gen/mms-docs/commit/14352ea37d6b1707c0d59fe3e74099144f6e9a4e&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="3675394" author="xgen-internal-githook" created="Sun, 21 Mar 2021 19:30:39 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;name&apos;: &apos;Anthony Sansone&apos;, &apos;email&apos;: &apos;tony.sansone@mongodb.com&apos;, &apos;username&apos;: &apos;atsansone&apos;}
&lt;p&gt;Message: (DOCSP-15207) Backport &lt;a href=&quot;https://jira.mongodb.org/browse/DOCS-14083&quot; title=&quot;[OM] Update queryable snapshot/restores to disable TLSv1 and ciphers&quot; class=&quot;issue-link&quot; data-issue-key=&quot;DOCS-14083&quot;&gt;&lt;del&gt;DOCS-14083&lt;/del&gt;&lt;/a&gt; to v4.4 (#3635)&lt;br/&gt;
Branch: v4.4&lt;br/&gt;
&lt;a href=&quot;https://github.com/10gen/mms-docs/commit/f901b5c83830eefc9988d297df8fbd72981a5461&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/10gen/mms-docs/commit/f901b5c83830eefc9988d297df8fbd72981a5461&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="3671611" author="xgen-internal-githook" created="Thu, 18 Mar 2021 16:52:58 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;name&apos;: &apos;Anthony Sansone&apos;, &apos;email&apos;: &apos;tony.sansone@mongodb.com&apos;, &apos;username&apos;: &apos;atsansone&apos;}
&lt;p&gt;Message: (&lt;a href=&quot;https://jira.mongodb.org/browse/DOCS-14083&quot; title=&quot;[OM] Update queryable snapshot/restores to disable TLSv1 and ciphers&quot; class=&quot;issue-link&quot; data-issue-key=&quot;DOCS-14083&quot;&gt;&lt;del&gt;DOCS-14083&lt;/del&gt;&lt;/a&gt;) Added TLS settings for Queryable&lt;br/&gt;
Branch: master&lt;br/&gt;
&lt;a href=&quot;https://github.com/10gen/mms-docs/commit/fe85bcae4e72602081b4dc8c8b0dfb5b9de393b0&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/10gen/mms-docs/commit/fe85bcae4e72602081b4dc8c8b0dfb5b9de393b0&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="3667812" author="tony.sansone" created="Tue, 16 Mar 2021 21:43:07 +0000"  >&lt;p&gt;I added these settings for the configuration page only &lt;em&gt;because&lt;/em&gt; they were not visible in the Ops Manager Config pages.&#160;&lt;/p&gt;</comment>
                            <comment id="3658441" author="tony.sansone" created="Thu, 11 Mar 2021 04:48:09 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=xiang.gao&quot; class=&quot;user-hover&quot; rel=&quot;xiang.gao&quot;&gt;xiang.gao&lt;/a&gt;: Any objection to documenting these settings?&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10420">
                    <name>Backports</name>
                                            <outwardlinks description="backported by">
                                                        </outwardlinks>
                                                        </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                <customfield id="customfield_10050" key="com.atlassian.jira.toolkit:comments">
                        <customfieldname># Replies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>6.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_13552" key="com.go2group.jira.plugin.crm:crm_generic_field">
                        <customfieldname>Case</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue><![CDATA[[5002K00000ocksiQAA]]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10055" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>Date of 1st Reply</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Thu, 11 Mar 2021 04:48:09 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10052" key="com.atlassian.jira.toolkit:dayslastcommented">
                        <customfieldname>Days since reply</customfieldname>
                        <customfieldvalues>
                                        2 years, 31 weeks, 6 days ago
    
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18254" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Dependencies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue><![CDATA[]]></customfieldvalue>


                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                            <customfield id="customfield_10857" key="com.pyxis.greenhopper.jira:gh-epic-link">
                        <customfieldname>Epic Link</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>DOCSP-3127</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10057" key="com.atlassian.jira.toolkit:lastusercommented">
                        <customfieldname>Last comment by Customer</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>true</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10056" key="com.atlassian.jira.toolkit:lastupdaterorcommenter">
                        <customfieldname>Last commenter</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>luke.bonanomi@mongodb.com</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_11151" key="com.atlassian.jira.toolkit:LastCommentDate">
                        <customfieldname>Last public comment date</customfieldname>
                        <customfieldvalues>
                            2 years, 31 weeks, 6 days ago
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                            <customfield id="customfield_10051" key="com.atlassian.jira.toolkit:participants">
                        <customfieldname>Participants</customfieldname>
                        <customfieldvalues>
                                        <customfieldvalue>tony.sansone@mongodb.com</customfieldvalue>
            <customfieldvalue>charles.merrill@mongodb.com</customfieldvalue>
            <customfieldvalue>xgen-internal-githook</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_14254" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Product Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hyo2of:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hyhhvz:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                    <customfield id="customfield_10557" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue id="4506">CET: Umbra (5 - 11 Jan 21)</customfieldvalue>
    <customfieldvalue id="4507">CET: Vega (12 - 18  Jan 21)</customfieldvalue>
    <customfieldvalue id="4747">CET: Fugees (16-22 Mar 21)</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                        <customfield id="customfield_10555" key="com.atlassian.jira.plugin.system.customfieldtypes:float">
                        <customfieldname>Story Points</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_10053" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>Time In Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_14350" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>serverRank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hynoxr:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                </customfields>
    </item>
</channel>
</rss>