<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Thu Feb 08 08:36:23 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[GODRIVER-1435] Please add tlsCertificateFile and tlsKeyFile connection string options.</title>
                <link>https://jira.mongodb.org/browse/GODRIVER-1435</link>
                <project id="14289" key="GODRIVER">Go Driver</project>
                    <description>&lt;p&gt;Currently, there is only the tlsCertificateKeyFile option (&lt;a href=&quot;https://docs.mongodb.com/manual/reference/connection-string/)&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://docs.mongodb.com/manual/reference/connection-string/)&lt;/a&gt; but the file must contain both certificate and key (mongo/options/clientoptions.go).&lt;/p&gt;

&lt;p&gt;The crypto/tls package provides the LoadX509KeyPair function that &quot;reads and parses a public/private key pair from a pair of files.&quot;&#160; In light of this, it should follow that the mongo-go-driver also provide 2 connection string options for specifying the client certificate and client key files separately.&#160; Using new option names will provide full compatibility.&lt;/p&gt;</description>
                <environment></environment>
        <key id="1047783">GODRIVER-1435</key>
            <summary>Please add tlsCertificateFile and tlsKeyFile connection string options.</summary>
                <type id="4" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14710&amp;avatarType=issuetype">Improvement</type>
                                            <priority id="3" iconUrl="https://jira.mongodb.org/images/icons/priorities/major.svg">Major - P3</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="13201">Fixed</resolution>
                                        <assignee username="divjot.arora@mongodb.com">Divjot Arora</assignee>
                                    <reporter username="fungchai.lim@ncs.com.sg">Fung-Chai LIM</reporter>
                        <labels>
                    </labels>
                <created>Wed, 11 Dec 2019 06:35:42 +0000</created>
                <updated>Sat, 28 Oct 2023 11:38:24 +0000</updated>
                            <resolved>Tue, 14 Jan 2020 18:00:23 +0000</resolved>
                                                    <fixVersion>1.3.0</fixVersion>
                                                        <votes>0</votes>
                                    <watches>3</watches>
                                                                                                                <comments>
                            <comment id="2735113" author="divjot.arora" created="Thu, 16 Jan 2020 16:10:02 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=fungchai.lim%40ncs.com.sg&quot; class=&quot;user-hover&quot; rel=&quot;fungchai.lim@ncs.com.sg&quot;&gt;fungchai.lim@ncs.com.sg&lt;/a&gt; The commit will be part of the 1.3.0 release, which is planned for later this month.&lt;/p&gt;</comment>
                            <comment id="2734118" author="fungchai.lim@ncs.com.sg" created="Thu, 16 Jan 2020 10:04:57 +0000"  >&lt;p&gt;@Divjot.Arora,&lt;br/&gt;
Thank you for this commit.  It will be very useful for my project.  When will this commit be tagged?  Thanks.&lt;/p&gt;</comment>
                            <comment id="2724882" author="xgen-internal-githook" created="Tue, 14 Jan 2020 17:59:51 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;name&apos;: &apos;Divjot Arora&apos;, &apos;email&apos;: &apos;divjot.arora@10gen.com&apos;, &apos;username&apos;: &apos;divjotarora&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/GODRIVER-1435&quot; title=&quot;Please add tlsCertificateFile and tlsKeyFile connection string options.&quot; class=&quot;issue-link&quot; data-issue-key=&quot;GODRIVER-1435&quot;&gt;&lt;del&gt;GODRIVER-1435&lt;/del&gt;&lt;/a&gt; Add tlsCertificateFile and tlsPrivateKeyFile URI options (#271)&lt;br/&gt;
Branch: master&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo-go-driver/commit/c0d964c4f1af0c5b631c232664788e4b327ab5a7&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo-go-driver/commit/c0d964c4f1af0c5b631c232664788e4b327ab5a7&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="2699162" author="divjot.arora" created="Thu, 2 Jan 2020 19:15:34 +0000"  >&lt;p&gt;The investigation stage of this ticket is largely done, so I&apos;m going to put this back into Scheduled and pick this up after I&apos;m done with my work on &lt;a href=&quot;https://jira.mongodb.org/browse/GODRIVER-1438&quot; title=&quot;Separate RegisterEncoder/Decoder functions to &amp;quot;types&amp;quot; and &amp;quot;hooks&amp;quot;&quot; class=&quot;issue-link&quot; data-issue-key=&quot;GODRIVER-1438&quot;&gt;&lt;del&gt;GODRIVER-1438&lt;/del&gt;&lt;/a&gt;.&lt;/p&gt;</comment>
                            <comment id="2658580" author="divjot.arora" created="Fri, 20 Dec 2019 19:55:04 +0000"  >&lt;p&gt;Hi &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=fungchai.lim%40ncs.com.sg&quot; class=&quot;user-hover&quot; rel=&quot;fungchai.lim@ncs.com.sg&quot;&gt;fungchai.lim@ncs.com.sg&lt;/a&gt;,&lt;/p&gt;

&lt;p&gt;Just wanted to give you an update on this. I&apos;ve looked at other drivers and it seems like some are supporting these extra options. After the holidays, I plan on adding the options you proposed. This will allow users to either specify &lt;tt&gt;tlsCertificateKeyFile&lt;/tt&gt; with both files concatenated or to specify both &lt;tt&gt;tlsCertificateFile&lt;/tt&gt; and &lt;tt&gt;tlsKeyFile&lt;/tt&gt;. It will be an error&#160; if the existing option is specified with any of the new options.&lt;/p&gt;

&lt;p&gt;&#160;&lt;/p&gt;

&lt;p&gt;&amp;#8211; Divjot&lt;/p&gt;</comment>
                            <comment id="2644015" author="divjot.arora" created="Wed, 18 Dec 2019 18:41:06 +0000"  >&lt;p&gt;Hi &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=fungchai.lim%40ncs.com.sg&quot; class=&quot;user-hover&quot; rel=&quot;fungchai.lim@ncs.com.sg&quot;&gt;fungchai.lim@ncs.com.sg&lt;/a&gt;,&lt;/p&gt;

&lt;p&gt;I agree these extra options could be useful for users. I am currently investigating the best way to add them and define the interactions between these options and the existing &lt;tt&gt;tlsCertificateKeyFile&lt;/tt&gt; option, as users could specify any combination of the three. I will add another comment on this ticket when I&apos;ve figured this out and let you know how we plan on progressing&lt;/p&gt;

&lt;p&gt;&#160;&lt;/p&gt;

&lt;p&gt;&amp;#8211; Divjot&lt;/p&gt;</comment>
                            <comment id="2639059" author="fungchai.lim@ncs.com.sg" created="Wed, 18 Dec 2019 02:42:59 +0000"  >&lt;p&gt;Hi, want to add some explanation in case you don&apos;t understand the description.&lt;/p&gt;

&lt;p&gt;The DevOps team may provide the client cert and key in 2 separate files.&#160; We cannot use tlsCertificateKeyFile=cert.pem&amp;amp;tlsCertificateKeyFile=key.pem or tlsCerticateKeyFile=client.pem,key.pem in the connection string.&#160; The comments in clientoptions.go say the files should be concatenated into one file.&lt;/p&gt;

&lt;p&gt;The DevOps team objects to putting the cert and key into one file as the key is supposed to be private.&#160; We mentioned the tlsCerticateKeyFilePassword but they don&apos;t want another configuration parameter.&lt;/p&gt;

&lt;p&gt;So, now we are not putting TLS parameters in the connection string.&#160; Instead, we are calling the LoadX509KeyPair in our code.&#160; It would be nice if the mongo-go-driver does this for us.&#160; It would be nice if the driver can accept tlsCerticateKeyFile=client.pem,key.pem or provide 2 new tlsCertificateFile and tlsKeyFile options.&lt;/p&gt;</comment>
                    </comments>
                    <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                        <customfield id="customfield_10011" key="com.atlassian.jira.plugin.system.customfieldtypes:radiobuttons">
                        <customfieldname>Backwards Compatibility</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10038"><![CDATA[Fully Compatible]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hvrsjb:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            </customfields>
    </item>
</channel>
</rss>