File tree Expand file tree Collapse file tree 1 file changed +20
-0
lines changed Expand file tree Collapse file tree 1 file changed +20
-0
lines changed Original file line number Diff line number Diff line change @@ -983,6 +983,10 @@ To connect to the MongoDB deployment using TLS:
983983- Specify the client TLS certificate.
984984- Specify the CA certificate to verify the server's TLS certificate.
985985
986+ .. note::
987+
988+ When using JRuby, ECDSA certificates are not currently supported.
989+
986990Enable TLS Connections
987991----------------------
988992
@@ -1127,6 +1131,22 @@ The ``:ssl_ca_cert_string`` option supports specifying only one CA certificate.
11271131 If intermediate certificates need to be used, specify them as part of the
11281132 client or server TLS certificate files.
11291133
1134+ OCSP Verification
1135+ -----------------
1136+
1137+ If the certificate provided by the server contains an OCSP endpoint URI,
1138+ the driver will issue an OCSP request to the specified endpoint to verify the
1139+ validity of the certificate.
1140+
1141+ The OCSP endpoint check may be disabled by setting the
1142+ ``:ssl_verify_ocsp_endpoint`` Ruby option to ``false`` or by setting the
1143+ ``tlsDisableOCSPEndpointCheck`` URI option to ``true`` when creating a client.
1144+
1145+ .. note::
1146+
1147+ OCSP endpoint checking is not currently performed when running on JRuby,
1148+ since JRuby does not correctly expose the OCSP endpoint URI.
1149+
11301150
11311151IPv4/IPv6 Connections
11321152=====================
You can’t perform that action at this time.
0 commit comments