-
Type: New Feature
-
Resolution: Fixed
-
Priority: Major - P3
-
Affects Version/s: None
-
Component/s: None
-
None
As part of implementing OCSP support for 4.4, the Go driver has added support for the tlsDisableOCSPEndpointCheck URI option. This allows users to disable network communication with the OCSP responder, which might be unreachable from the application server, to avoid an HTTP roundtrip every time a connection is established. The tools should modify the configureClient method in mongo-tools-common to account for this option.
See https://github.com/mongodb/specifications/blob/master/source/ocsp-support/ocsp-support.rst#tlsdisableocspendpointcheck for some more information/rationale for the option.