Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MongoDB: Allow setting SSL options or Connection String #11885

Open
dror-g opened this issue Apr 30, 2024 · 1 comment
Open

MongoDB: Allow setting SSL options or Connection String #11885

dror-g opened this issue Apr 30, 2024 · 1 comment
Assignees
Labels
enhancement New feature or request

Comments

@dror-g
Copy link

dror-g commented Apr 30, 2024

Is your feature request related to a problem?

Hi, afraid I can't connect to AWS DocumentDB.
Since SSH Tunnel is not available, I use ssh -L and run locally.

Problem is - the AWS CA cert will consider the hostname invalid, and AllowInvalidHostnames option cannot be set, so connection will timeout.

(note: Could be overcome by running inside AWS for now)

Describe the solution you'd like

Optimally, allow selecting SSL options in UI -

  • tlsAllowInvalidHostnames
  • tlAllowInvalidCertificates (will probably be useful to users)

Alternatively or additionally - allow users to set the MongoDB Connection String:
mongodb://<user>:<Password>@docdb.us-east-1.docdb.amazonaws.com:27017/?tls=true&tlsCAFile=<CAcert>&tlsAllowInvalidHostname=true

The Connection String workaround is common in tools that don't allow setting the SSL, and also allows setting other MongoDB options (i.e readSecondary and such).

Cheers!

Additional context

No response

@dror-g dror-g added the enhancement New feature or request label Apr 30, 2024
@h3n4l h3n4l self-assigned this May 6, 2024
@h3n4l
Copy link
Member

h3n4l commented May 6, 2024

Thanks for you contribution, we will look into this problem. And I believe the key problem is that use ssh tunnel as you said.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants