Skip to content

Commit 48fcb3f

Browse files
authoredFeb 2, 2024
DOCS-16619 Clarify allowInvalidCertificates and allowInvalidHostnames (#6129) (#6191)
* DOCS-16619 Clarify allowInvalidCertificates and allowInvalidHostnames parameter scope * edits * CT feedback
1 parent e03fb3d commit 48fcb3f

File tree

1 file changed

+10
-8
lines changed

1 file changed

+10
-8
lines changed
 

‎source/reference/configuration-options.txt

+10-8
Original file line numberDiff line numberDiff line change
@@ -1721,11 +1721,11 @@ Core Options
17211721

17221722
.. include:: /includes/extracts/tls-facts-x509-invalid-certificate.rst
17231723

1724-
When using
1725-
the :setting:`net.tls.allowInvalidCertificates` setting, MongoDB
1724+
When using the ``net.tls.allowInvalidCertificates`` setting, MongoDB
17261725
logs a warning regarding the use of the invalid certificate.
17271726

1728-
.. include:: /includes/extracts/tls-facts-see-more.rst
1727+
For more information about TLS and MongoDB, see
1728+
:ref:`configure-mongod-mongos-for-tls-ssl` and :ref:`inter-process-auth`.
17291729

17301730

17311731
.. setting:: net.tls.allowInvalidHostnames
@@ -1734,12 +1734,14 @@ Core Options
17341734

17351735
*Default*: false
17361736

1737-
When :setting:`net.tls.allowInvalidHostnames` is ``true``, MongoDB disables the validation of the
1738-
hostnames in TLS certificates, allowing :binary:`~bin.mongod` to connect to
1739-
MongoDB instances if the hostname their certificates do not match the
1740-
specified hostname.
1737+
When ``net.tls.allowInvalidHostnames`` is ``true``, MongoDB disables
1738+
the validation of the hostnames in TLS certificates. This allows
1739+
:binary:`~bin.mongod` or :binary:`~bin.mongos` to connect to other MongoDB
1740+
instances in the cluster, even if the hostname of their certificates does not
1741+
match the specified hostname.
17411742

1742-
.. include:: /includes/extracts/tls-facts-see-more.rst
1743+
For more information about TLS and MongoDB, see
1744+
:ref:`configure-mongod-mongos-for-tls-ssl`.
17431745

17441746

17451747
.. setting:: net.tls.disabledProtocols

0 commit comments

Comments
 (0)
Please sign in to comment.