Skip to content

Conversation

@abhiramtilakiiit
Copy link
Contributor

About

  • This PR has been long due, its time to either do this or drop this completely.
  • This PR requires a lot of changes and testing in the server side, (prolly staging).
  • Basically the aim is to be able to securely (TLS) connect to production compass with some sort of certificate verification.

Changes

  • Changes the docker-compose.prod

Todo

  • We need to make a custom mongod.conf configuration which can have detailed tls setup info, along with pem file location. A sample is given below:
net:
  port: 27017
  bindIp: 0.0.0.0
  tls:
    mode: requireTLS
    certificateKeyFile: /etc/ssl/mongodb.pem
    CAFile: /etc/ssl/ca.pem # Optional, if client certificate validation is required
  • We also require both client side and server-side certs, to be generated using command such as this:
openssl req -newkey rsa:2048 -nodes -keyout mongodb.key -x509 -days 365 -out mongodb.crt
cat mongodb.crt mongodb.key > mongodb.pem

@bhavberi bhavberi force-pushed the master branch 3 times, most recently from 6733232 to 4bb7369 Compare December 20, 2024 10:57
@bhavberi bhavberi force-pushed the master branch 7 times, most recently from 3245487 to ff579e0 Compare January 29, 2025 08:45
@bhavberi bhavberi force-pushed the master branch 6 times, most recently from 02c9689 to 3fe97b0 Compare February 26, 2025 04:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants