Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-72846

Fix misleading startup warning about client certificate validation

    • Type: Icon: Bug Bug
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 7.0.0-rc0
    • Affects Version/s: None
    • Component/s: None
    • Server Security
    • Fully Compatible
    • Security 2023-01-23, Security 2023-02-06, Security 2023-02-20
    • 157

      This warning at startup:

      {
          "t": {"$date": "2022-12-19T08:37:18.220+01:00"},
          "s": "W",
          "c": "CONTROL",
          "id": 22133,
          "ctx": "initandlisten",
          "msg": "No client certificate validation can be performed since no CA file has been provided. Please specify an sslCAFile parameter"
      }
      

      is logged when the CAFile is unspecified. However, if clusterCAFile is specified (instead of CAFile), this warning is still logged even though client certificate validation can be performed using the clusterCAFile. We should fix it so that this warning only shows up if CAFile and clusterCAFile are not provided.

            Assignee:
            adrian.gonzalez@mongodb.com Adrian Gonzalez Montemayor
            Reporter:
            erwin.pe@mongodb.com Erwin Pe
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: