DOCSP-7419 tls-update (BACKPORT) (#2008)

jason-price-mongodb · jason-price-mongodb · web-flow · commit 7ea94ef50d9d · 2022-10-14T12:04:16.000-07:00
* DOCSP-24951 regex updates (#1771) * DOCSP-24951-regex-updates * DOCSP-24951-regex-updates * DOCSP-24951-regex-updates * DOCSP-24951-regex-updates Co-authored-by: jason-price-mongodb <jshfjghsdfgjsdjh@aolsdjfhkjsdhfkjsdf.com> * DOCSP-24951 regex updates * DOCSP-7419 tls update (#2001) * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update * DOCSP-7419-tls-update Co-authored-by: jason-price-mongodb <jshfjghsdfgjsdjh@aolsdjfhkjsdhfkjsdf.com> Co-authored-by: jason-price-mongodb <jshfjghsdfgjsdjh@aolsdjfhkjsdhfkjsdf.com>
diff --git a/source/includes/TLS-SSL-certificates.rst b/source/includes/TLS-SSL-certificates.rst
@@ -0,0 +1,3 @@
+For clients that don't provide certificates, :binary:`~bin.mongod` or
+:binary:`~bin.mongos` encrypts the TLS/SSL connection, assuming the
+connection is successfully made.
diff --git a/source/reference/configuration-options.txt b/source/reference/configuration-options.txt
@@ -1503,8 +1503,7 @@ Core Options
 
    .. versionadded:: 4.2
    
-   For clients that do not present certificates, :binary:`~bin.mongos` or :binary:`~bin.mongod` bypasses
-   TLS/SSL certificate validation when establishing the connection.
+   .. include:: /includes/TLS-SSL-certificates.rst
    
    For clients that present a certificate, however, :binary:`~bin.mongos` or :binary:`~bin.mongod` performs
    certificate validation using the root certificate chain specified by
@@ -2046,9 +2045,8 @@ Core Options
       Use :setting:`net.tls.allowConnectionsWithoutCertificates`
       instead.
    
-   For clients that do not present certificates, :binary:`~bin.mongos` or :binary:`~bin.mongod` bypasses
-   TLS/SSL certificate validation when establishing the connection.
-   
+   .. include:: /includes/TLS-SSL-certificates.rst
+
    For clients that present a certificate, however, :binary:`~bin.mongos` or :binary:`~bin.mongod` performs
    certificate validation using the root certificate chain specified by
    :setting:`~net.ssl.CAFile` and reject clients with invalid certificates.
diff --git a/source/reference/program/mongod.txt b/source/reference/program/mongod.txt
@@ -2316,9 +2316,8 @@ TLS Options
 
    .. versionadded:: 4.2
    
-   For clients that do not present certificates, :program:`mongod` bypasses
-   TLS/SSL certificate validation when establishing the connection.
-   
+   .. include:: /includes/TLS-SSL-certificates.rst
+
    For clients that present a certificate, however, :program:`mongod` performs
    certificate validation using the root certificate chain specified by
    ``--tlsCAFile`` and reject clients with invalid certificates.
@@ -2788,8 +2787,7 @@ SSL Options (Deprecated)
       Use :option:`--tlsAllowConnectionsWithoutCertificates
       <mongod --tlsAllowConnectionsWithoutCertificates>` instead.
    
-   For clients that do not present certificates, :program:`mongod` bypasses
-   TLS/SSL certificate validation when establishing the connection.
+   .. include:: /includes/TLS-SSL-certificates.rst
    
    For clients that present a certificate, however, :program:`mongod` performs
    certificate validation using the root certificate chain specified by
diff --git a/source/reference/program/mongos.txt b/source/reference/program/mongos.txt
@@ -1008,9 +1008,8 @@ TLS Options
 
    .. versionadded:: 4.2
    
-   For clients that do not present certificates, :program:`mongos` bypasses
-   TLS/SSL certificate validation when establishing the connection.
-   
+   .. include:: /includes/TLS-SSL-certificates.rst
+
    For clients that present a certificate, however, :program:`mongos` performs
    certificate validation using the root certificate chain specified by
    ``--tlsCAFile`` and reject clients with invalid certificates.
@@ -1409,8 +1408,7 @@ SSL Options (Deprecated)
       Use :option:`--tlsAllowConnectionsWithoutCertificates
       <mongos --tlsAllowConnectionsWithoutCertificates>` instead.
    
-   For clients that do not present certificates, :program:`mongos` bypasses
-   TLS/SSL certificate validation when establishing the connection.
+   .. include:: /includes/TLS-SSL-certificates.rst
    
    For clients that present a certificate, however, :program:`mongos` performs
    certificate validation using the root certificate chain specified by

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	+For clients that don't provide certificates, :binary:`~bin.mongod` or
	`2`	+:binary:`~bin.mongos` encrypts the TLS/SSL connection, assuming the
	`3`	`+connection is successfully made.`