-
Type: Task
-
Resolution: Unresolved
-
Priority: Minor - P4
-
Affects Version/s: None
-
Component/s: None
-
Server Security
-
Minor Change
-
Security 2019-12-16, Security 2019-12-30
SERVER-43085 updated all X509 infra to use sha256 hashing and new CAs across the board.
Since the macOS CI machines require BUILD support for a few certificates, it's been left in an intermediate state.
Clean up this state with the linked BUILD ticket followed by removing the "old" trusted-ca.pem content. https://github.com/mongodb/mongo/blob/e0f6fdab23da872d9cf8a93b88c2332ba45041c0/jstests/libs/trusted-ca.pem#L55