File tree Expand file tree Collapse file tree 2 files changed +11
-10
lines changed Expand file tree Collapse file tree 2 files changed +11
-10
lines changed Original file line number Diff line number Diff line change @@ -2128,11 +2128,12 @@ description: |
2128
2128
server. Requires :setting:`enableEncryption` to be true.
2129
2129
2130
2130
When connecting to the KMIP server, the :binary:`~bin.mongod`
2131
- verifies that the specified {{role}} matches the ``SAN`` (or, if
2132
- ``SAN`` is not present, the ``CN``) in the certificate presented by
2133
- the KMIP server. If ``SAN`` is present, :binary:`~bin.mongod` does
2134
- not match against the ``CN``. If the hostname does not match the
2135
- ``SAN`` (or ``CN``), the :binary:`~bin.mongod` will fail to connect.
2131
+ verifies that the specified {{role}} matches the Subject Alternative
2132
+ Name ``SAN`` (or, if ``SAN`` is not present, the Common Name ``CN``)
2133
+ in the certificate presented by the KMIP server. If ``SAN`` is
2134
+ present, :binary:`~bin.mongod` does not match against the ``CN``. If
2135
+ the hostname does not match the ``SAN`` (or ``CN``), the
2136
+ :binary:`~bin.mongod` will fail to connect.
2136
2137
2137
2138
.. include:: /includes/fact-enterprise-only-admonition.rst
2138
2139
---
Original file line number Diff line number Diff line change @@ -98,11 +98,11 @@ for each database.
98
98
99
99
When connecting to the KMIP server, the :binary:`~bin.mongod` verifies
100
100
that the specified :option:`--kmipServerName <mongod --kmipServerName>`
101
- matches the ``SAN`` (or, if ``SAN`` is not present, the ``CN``) in the
102
- certificate presented by the KMIP server. If ``SAN`` is present,
103
- :binary:`~bin.mongod` does not match against the ``CN``. If the
104
- hostname does not match the ``SAN`` (or ``CN``), the
105
- :binary:`~bin.mongod` will fail to connect.
101
+ matches the Subject Alternative Name ``SAN`` (or, if ``SAN`` is not
102
+ present, the Common Name ``CN``) in the certificate presented by the
103
+ KMIP server. If ``SAN`` is present, :binary:`~bin.mongod` does not
104
+ match against the ``CN``. If the hostname does not match the ``SAN``
105
+ (or ``CN``), the :binary:`~bin.mongod` will fail to connect.
106
106
107
107
To verify that the key creation and usage was successful, check the log
108
108
file. If successful, the process will log the following messages:
You can’t perform that action at this time.
0 commit comments