Use webpki-roots (Mozilla's root certificates) instead of native ones. This standardizes TLS certificates across dependencies, since mongodb only supports webpki roots. It also improves security when running in out-of-date or minimal environments such as containers by embedding root certificates in the binary.
Use
webpki-roots(Mozilla's root certificates) instead of native ones. This standardizes TLS certificates across dependencies, sincemongodbonly supports webpki roots. It also improves security when running in out-of-date or minimal environments such as containers by embedding root certificates in the binary.