-
Type: Task
-
Resolution: Fixed
-
Priority: Major - P3
-
Affects Version/s: None
-
Component/s: None
-
None
-
Fully Compatible
-
Sharding 2020-10-19, Sharding 2020-11-02, Sharding 2020-11-16, Sharding 2020-11-30
-
32
This is part of the effort to "Support Multiple Cluster Certificates for Tenant Migrations".
In the existing code (seeĀ SSLManagerOpenSSL::_setupPEM()) the certificate has to be read from PEM file. In the tenant migration project we need to support temporary certificates sent to us as part of the start migration command. The cert will be sent as a payload to this command.
- is depended on by
-
SERVER-51811 Make the TransportLayerASIO to accept transient SSL params in connect()
- Closed
- is related to
-
SERVER-52858 Server-side MacOS and Windows SSL configuration doesn't fail if the PEM file is absent
- Closed
-
SERVER-51600 Make donorStartMigration and recipientSyncData parse the passed-in cert and key
- Closed
- related to
-
SERVER-52870 Investigate SSL breakages reproduced by pending test tenant_migration_donor_ssl.js
- Closed