3 ms·

I was hoping the security enhancements would include SSL certificate validation. Anyone know why they don't do that, or how a user should approach that limitati

I was hoping the security enhancements would include SSL certificate validation. Anyone know why they don't do that, or how a user should approach that limitation?

matthewlucid 14y ago
We'll be moving away from MongoDB because it doesn't support certificate validation. What is the point of SSL connections if you don't validate the certificate? It seems that you get all the drawbacks of encryption (overhead, throughput) with none of the benefits (security). I'd love to see a solution.
- octix 14y ago
  Have you considered SSL tunneling?
- kstirman 14y ago
  http://docs.mongodb.org/manual/administration/ssl/#ssl-configuration-for-clients http://docs.mongodb.org/manual/administration/ssl/#ssl-confi...
milkie 14y ago
SSL certificate validation is in the 2.4 release.
- mrinterweb 14y ago
  I'm guessing this is the ticket for SSL support https://jira.mongodb.org/browse/SERVER-7202 https://jira.mongodb.org/browse/SERVER-7202