feat: Add tls_invalid_certificates argument

voxpupuli / puppet-mongodb

mongodb installation

Apache License 2.0

93 stars 451 forks source link

feat: Add tls_invalid_certificates argument #742

Closed jouir closed 7 months ago

jouir commented 7 months ago

Hello,

Since MongoDB 7.0.6, when CAFile nor clusterCAFile is provided, the server refuses to start.

https://jira.mongodb.org/browse/SERVER-72839

Servers having self-signed certificates must define:

tlsUseSystemCA (via set_parameters)
net.tls.allowInvalidCertificates

https://www.mongodb.com/docs/manual/reference/configuration-options/#mongodb-setting-net.tls.allowInvalidCertificates

This commit enables net.tls.allowInvalidCertificates via tls_invalid_certificates.

h-haaks commented 7 months ago

@jouir as you may have noticed there has been a few major changes i the master branch lately. I took the liberty to rebase your branch and fix test issues.