-
Type: Improvement
-
Resolution: Won't Do
-
Priority: Minor - P4
-
None
-
Affects Version/s: None
-
Component/s: Documentation
-
None
-
(copied to CRM)
The C# Driver currently enables certificate revocation checking by default (https://github.com/mongodb/mongo-csharp-driver/blob/ec74978f7e827515f29cc96fba0c727828e8df7c/src/MongoDB.Driver.Core/Core/Configuration/SslStreamSettings.cs#L53), in contrast to the shell and the Python driver. This is also in contrast to the defaults for SslStream (see https://docs.microsoft.com/en-us/dotnet/api/system.net.security.sslstream.authenticateasclient?view=netframework-4.7.2#System_Net_Security_SslStream_AuthenticateAsClient_System_String_ and https://docs.microsoft.com/en-us/dotnet/api/system.net.security.sslstream.authenticateasclient?view=netframework-4.7.2#System_Net_Security_SslStream_AuthenticateAsClient_System_String_). This has caused some confusion (see https://jira.mongodb.org/browse/HELP-6587). This divergence from the .NET defaults and the behavior of other drivers/the shell should be documented.
- is related to
-
CSHARP-2279 Disable certificate revocation checking by default
- Closed