DOCSP-7419 tls update (#2001) (#2007)

jason-price-mongodb · jason-price-mongodb · web-flow · commit 5e29f516bd70 · 2022-10-13T16:58:49.000-07:00
* DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update Co-authored-by: jason-price-mongodb <jshfjghsdfgjsdjh@aolsdjfhkjsdhfkjsdf.com> Co-authored-by: jason-price-mongodb <jshfjghsdfgjsdjh@aolsdjfhkjsdhfkjsdf.com>
diff --git a/source/includes/TLS-SSL-certificates.rst b/source/includes/TLS-SSL-certificates.rst
@@ -0,0 +1,3 @@
+For clients that don't provide certificates, :binary:`~bin.mongod` or
+:binary:`~bin.mongos` encrypts the TLS/SSL connection, assuming the
+connection is successfully made.
diff --git a/source/reference/configuration-options.txt b/source/reference/configuration-options.txt
@@ -1521,8 +1521,7 @@ Core Options
 
    .. versionadded:: 4.2
    
-   For clients that do not present certificates, :binary:`~bin.mongos` or :binary:`~bin.mongod` bypasses
-   TLS/SSL certificate validation when establishing the connection.
+   .. include:: /includes/TLS-SSL-certificates.rst
    
    For clients that present a certificate, however, :binary:`~bin.mongos` or :binary:`~bin.mongod` performs
    certificate validation using the root certificate chain specified by
@@ -2072,9 +2071,8 @@ Core Options
       Use :setting:`net.tls.allowConnectionsWithoutCertificates`
       instead.
    
-   For clients that do not present certificates, :binary:`~bin.mongos` or :binary:`~bin.mongod` bypasses
-   TLS/SSL certificate validation when establishing the connection.
-   
+   .. include:: /includes/TLS-SSL-certificates.rst
+
    For clients that present a certificate, however, :binary:`~bin.mongos` or :binary:`~bin.mongod` performs
    certificate validation using the root certificate chain specified by
    :setting:`~net.ssl.CAFile` and reject clients with invalid certificates.
diff --git a/source/reference/program/mongod.txt b/source/reference/program/mongod.txt
@@ -2372,9 +2372,8 @@ TLS Options
 
    .. versionadded:: 4.2
    
-   For clients that do not present certificates, :program:`mongod` bypasses
-   TLS/SSL certificate validation when establishing the connection.
-   
+   .. include:: /includes/TLS-SSL-certificates.rst
+
    For clients that present a certificate, however, :program:`mongod` performs
    certificate validation using the root certificate chain specified by
    ``--tlsCAFile`` and reject clients with invalid certificates.
@@ -2853,8 +2852,7 @@ SSL Options (Deprecated)
       Use :option:`--tlsAllowConnectionsWithoutCertificates
       <mongod --tlsAllowConnectionsWithoutCertificates>` instead.
    
-   For clients that do not present certificates, :program:`mongod` bypasses
-   TLS/SSL certificate validation when establishing the connection.
+   .. include:: /includes/TLS-SSL-certificates.rst
    
    For clients that present a certificate, however, :program:`mongod` performs
    certificate validation using the root certificate chain specified by
diff --git a/source/reference/program/mongos.txt b/source/reference/program/mongos.txt
@@ -1029,9 +1029,8 @@ TLS Options
 
    .. versionadded:: 4.2
    
-   For clients that do not present certificates, :program:`mongos` bypasses
-   TLS/SSL certificate validation when establishing the connection.
-   
+   .. include:: /includes/TLS-SSL-certificates.rst
+
    For clients that present a certificate, however, :program:`mongos` performs
    certificate validation using the root certificate chain specified by
    ``--tlsCAFile`` and reject clients with invalid certificates.
@@ -1440,8 +1439,7 @@ SSL Options (Deprecated)
       Use :option:`--tlsAllowConnectionsWithoutCertificates
       <mongos --tlsAllowConnectionsWithoutCertificates>` instead.
    
-   For clients that do not present certificates, :program:`mongos` bypasses
-   TLS/SSL certificate validation when establishing the connection.
+   .. include:: /includes/TLS-SSL-certificates.rst
    
    For clients that present a certificate, however, :program:`mongos` performs
    certificate validation using the root certificate chain specified by

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	+For clients that don't provide certificates, :binary:`~bin.mongod` or
	`2`	+:binary:`~bin.mongos` encrypts the TLS/SSL connection, assuming the
	`3`	`+connection is successfully made.`