Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-49129

Extend SSLManagerInterface with new function

    • Type: Icon: Task Task
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 4.7.0
    • Affects Version/s: None
    • Component/s: Security
    • None
    • Fully Compatible
    • Security 2020-07-13

      Add a new function returns this information so that rotation can log the information in one place instead of each implementation of the SSLManagerInterface. It should return a struct instead of BSON to ensure logging is done consistently across all implementations.

      Example Function Name: CertInformationToLog getCertificateInformationToLog()

      struct CertInformationToLog
      {    
          SSLX509Name subject;
          SSLX509Name issuer;
          std::vector<char> thumbprint;
          Date_t validityNotBefore;
          Date_t validityNotAfter;   
      };
      
      struct CertInformationToLog
      {    
          std::vector<char> thumbprint;
          Date_t validityNotBefore;
          Date_t validityNotAfter;
          
      };
      
      struct SSLInformationToLog
      { 
          CertInformationToLog server;
          boost::optional<CertInformationToLog> cluster;
          boost::optional<CRLInformationToLog> crl;
      };
      

            Assignee:
            gabriel.marks@mongodb.com Gabriel Marks
            Reporter:
            mark.benvenuto@mongodb.com Mark Benvenuto
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: