diff options
| author | Shreyas Kalyan <shreyas.kalyan@10gen.com> | 2020-12-03 21:55:49 -0800 |
|---|---|---|
| committer | Evergreen Agent <no-reply@evergreen.mongodb.com> | 2021-01-06 23:34:36 +0000 |
| commit | c20e3c5001923d8e8385dab70786da97888b039e (patch) | |
| tree | b9bb4ac32fbbad1057007cb400e6d5f92309e507 /SConstruct | |
| parent | b58f5c476af6cfd70f9aad86e1e6007e61ec93d0 (diff) | |
| download | mongo-c20e3c5001923d8e8385dab70786da97888b039e.tar.gz | |
SERVER-51364 Ubuntu 18.04 Server with OCSP and TLS fails to work
Diffstat (limited to 'SConstruct')
| -rw-r--r-- | SConstruct | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/SConstruct b/SConstruct index 227d744be90..ed3bdce8309 100644 --- a/SConstruct +++ b/SConstruct @@ -198,6 +198,14 @@ add_option('wiredtiger', type='choice', ) +add_option('ocsp-stapling', + choices=['on', 'off'], + default='on', + help='Enable OCSP Stapling on servers', + nargs='?', + type='choice', +) + js_engine_choices = ['mozjs', 'none'] add_option('js-engine', choices=js_engine_choices, @@ -2444,6 +2452,13 @@ if get_option('wiredtiger') == 'on': wiredtiger = True env.SetConfigHeaderDefine("MONGO_CONFIG_WIREDTIGER_ENABLED") +if get_option('ocsp-stapling') == 'on': + # OCSP Stapling needs to be disabled on ubuntu 18.04 machines because when TLS 1.3 is + # enabled on that machine, the status-response message sent contains garbage data. This + # is a known bug and needs to be fixed by upstream, but for the time being we need to + # disable OCSP Stapling on Ubuntu 18.04 machines. See SERVER-51364 for more details. + env.SetConfigHeaderDefine("MONGO_CONFIG_OCSP_STAPLING_ENABLED") + if env['TARGET_ARCH'] == 'i386': # If we are using GCC or clang to target 32 bit, set the ISA minimum to 'nocona', # and the tuning to 'generic'. The choice of 'nocona' is selected because it |