Skip to content

Commit 7b97731

Browse files
authored
DOCS-16619 Clarify allowInvalidCertificates and allowInvalidHostnames (#6129) (#6193)
* DOCS-16619 Clarify allowInvalidCertificates and allowInvalidHostnames parameter scope * edits * CT feedback
1 parent a15e354 commit 7b97731

File tree

1 file changed

+10
-8
lines changed

1 file changed

+10
-8
lines changed

source/reference/configuration-options.txt

Lines changed: 10 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1473,11 +1473,11 @@ Core Options
14731473

14741474
.. include:: /includes/extracts/tls-facts-x509-invalid-certificate.rst
14751475

1476-
When using
1477-
the :setting:`net.tls.allowInvalidCertificates` setting, MongoDB
1476+
When using the ``net.tls.allowInvalidCertificates`` setting, MongoDB
14781477
logs a warning regarding the use of the invalid certificate.
14791478

1480-
.. include:: /includes/extracts/tls-facts-see-more.rst
1479+
For more information about TLS and MongoDB, see
1480+
:ref:`configure-mongod-mongos-for-tls-ssl` and :ref:`inter-process-auth`.
14811481

14821482

14831483
.. setting:: net.tls.allowInvalidHostnames
@@ -1486,12 +1486,14 @@ Core Options
14861486

14871487
*Default*: false
14881488

1489-
When :setting:`net.tls.allowInvalidHostnames` is ``true``, MongoDB disables the validation of the
1490-
hostnames in TLS certificates, allowing :binary:`~bin.mongod` to connect to
1491-
MongoDB instances if the hostname their certificates do not match the
1492-
specified hostname.
1489+
When ``net.tls.allowInvalidHostnames`` is ``true``, MongoDB disables
1490+
the validation of the hostnames in TLS certificates. This allows
1491+
:binary:`~bin.mongod` or :binary:`~bin.mongos` to connect to other MongoDB
1492+
instances in the cluster, even if the hostname of their certificates does not
1493+
match the specified hostname.
14931494

1494-
.. include:: /includes/extracts/tls-facts-see-more.rst
1495+
For more information about TLS and MongoDB, see
1496+
:ref:`configure-mongod-mongos-for-tls-ssl`.
14951497

14961498

14971499
.. setting:: net.tls.disabledProtocols

0 commit comments

Comments
 (0)