Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-12748

Disallow invalid combinations of sslMode and clusterAuthMode

    • Type: Icon: Bug Bug
    • Resolution: Done
    • Priority: Icon: Major - P3 Major - P3
    • 2.6.0-rc0
    • Affects Version/s: 2.5.5
    • Component/s: Security
    • Fully Compatible
    • ALL

      The invalid states are as follows:

      sslMode clusterAuthMode
      disabled sendKeyFile, sendX509, or x509
      allowSSL sendX509, or x509

      The above table must be checked at startup time. At runtime, only the following must be checked to preserve these invariants:

      sendKeyFile -> sendX509: Verify that sslMode is either preferSSL or requireSSL

            Assignee:
            andreas.nilsson Andreas Nilsson
            Reporter:
            sverch Shaun Verch
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: