Skip to content

Commit 47d908f

Browse files
authored
Docsp-13383 tls self signed certificates verbaige update (#326)
* DOCSP-13383 certificate verbiage update * Rewrapping lines 200-205 * Address Jason's comments #1
1 parent 6c575d9 commit 47d908f

File tree

1 file changed

+8
-7
lines changed

1 file changed

+8
-7
lines changed

source/core/security-transport-encryption.txt

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -196,13 +196,14 @@ To use TLS/SSL with MongoDB , you must have the TLS/SSL certificates as
196196
:file:`PEM` files, which are concatenated certificate containers.
197197

198198
MongoDB can use any valid TLS/SSL certificate issued by a certificate
199-
authority or a self-signed certificate. If you use a self-signed
200-
certificate, although the communications channel will be encrypted,
201-
there will be *no* validation of server identity. Although such a
202-
situation will prevent eavesdropping on the connection, it leaves you
203-
vulnerable to a man-in-the-middle attack. Using a certificate signed by
204-
a trusted certificate authority will permit MongoDB drivers to verify
205-
the server's identity.
199+
authority or a self-signed certificate. For production use, your MongoDB
200+
deployment should use valid certificates generated and signed by the
201+
same certificate authority. You can generate and maintain an independent
202+
certificate authority, or use certificates generated by a third-party
203+
TLS/SSL vendor.
204+
205+
Using a certificate signed by a trusted certificate authority allows
206+
MongoDB drivers to verify the server's identity.
206207

207208
For example, see :doc:`/tutorial/configure-ssl-clients`.
208209

0 commit comments

Comments
 (0)