File tree Expand file tree Collapse file tree 1 file changed +20
-0
lines changed Expand file tree Collapse file tree 1 file changed +20
-0
lines changed Original file line number Diff line number Diff line change @@ -983,6 +983,10 @@ To connect to the MongoDB deployment using TLS:
983
983
- Specify the client TLS certificate.
984
984
- Specify the CA certificate to verify the server's TLS certificate.
985
985
986
+ .. note::
987
+
988
+ When using JRuby, ECDSA certificates are not currently supported.
989
+
986
990
Enable TLS Connections
987
991
----------------------
988
992
@@ -1127,6 +1131,22 @@ The ``:ssl_ca_cert_string`` option supports specifying only one CA certificate.
1127
1131
If intermediate certificates need to be used, specify them as part of the
1128
1132
client or server TLS certificate files.
1129
1133
1134
+ OCSP Verification
1135
+ -----------------
1136
+
1137
+ If the certificate provided by the server contains an OCSP endpoint URI,
1138
+ the driver will issue an OCSP request to the specified endpoint to verify the
1139
+ validity of the certificate.
1140
+
1141
+ The OCSP endpoint check may be disabled by setting the
1142
+ ``:ssl_verify_ocsp_endpoint`` Ruby option to ``false`` or by setting the
1143
+ ``tlsDisableOCSPEndpointCheck`` URI option to ``true`` when creating a client.
1144
+
1145
+ .. note::
1146
+
1147
+ OCSP endpoint checking is not currently performed when running on JRuby,
1148
+ since JRuby does not correctly expose the OCSP endpoint URI.
1149
+
1130
1150
1131
1151
IPv4/IPv6 Connections
1132
1152
=====================
You can’t perform that action at this time.
0 commit comments