Skip to content

Commit 232d9ad

Browse files
p-mongop
andauthored
RUBY-2361 stub ocsp verifier tests on jruby due to lack of ocsp endpoint retrieval support (#2082)
* RUBY-2361 stub ocsp verifier tests on jruby due to lack of ocsp endpoint retrieval support * RUBY-2362 omit revoked configurations with jruby * RUBY-2362 omit jruby+ecdsa configurations Co-authored-by: Oleg Pudeyev <[email protected]>
1 parent c87f87f commit 232d9ad

File tree

1 file changed

+20
-0
lines changed

1 file changed

+20
-0
lines changed

source/tutorials/ruby-driver-create-client.txt

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -983,6 +983,10 @@ To connect to the MongoDB deployment using TLS:
983983
- Specify the client TLS certificate.
984984
- Specify the CA certificate to verify the server's TLS certificate.
985985

986+
.. note::
987+
988+
When using JRuby, ECDSA certificates are not currently supported.
989+
986990
Enable TLS Connections
987991
----------------------
988992

@@ -1127,6 +1131,22 @@ The ``:ssl_ca_cert_string`` option supports specifying only one CA certificate.
11271131
If intermediate certificates need to be used, specify them as part of the
11281132
client or server TLS certificate files.
11291133

1134+
OCSP Verification
1135+
-----------------
1136+
1137+
If the certificate provided by the server contains an OCSP endpoint URI,
1138+
the driver will issue an OCSP request to the specified endpoint to verify the
1139+
validity of the certificate.
1140+
1141+
The OCSP endpoint check may be disabled by setting the
1142+
``:ssl_verify_ocsp_endpoint`` Ruby option to ``false`` or by setting the
1143+
``tlsDisableOCSPEndpointCheck`` URI option to ``true`` when creating a client.
1144+
1145+
.. note::
1146+
1147+
OCSP endpoint checking is not currently performed when running on JRuby,
1148+
since JRuby does not correctly expose the OCSP endpoint URI.
1149+
11301150

11311151
IPv4/IPv6 Connections
11321152
=====================

0 commit comments

Comments
 (0)