summaryrefslogtreecommitdiff
path: root/src/mongo/util/net/ssl_manager.h
diff options
context:
space:
mode:
authorSara Golemon <sara.golemon@mongodb.com>2019-08-29 00:50:54 +0000
committerevergreen <evergreen@mongodb.com>2019-08-29 00:50:54 +0000
commitf299e8b9f2f1f39cf58f959579837e0d4b7a396d (patch)
tree7bc140f2405fb6b24f2e7f5b26882cb482835cc2 /src/mongo/util/net/ssl_manager.h
parent6729eaa16ca2794425fd90f034506e8d30a0cb5f (diff)
downloadmongo-f299e8b9f2f1f39cf58f959579837e0d4b7a396d.tar.gz
SERVER-41121 Warn when a peer certificate is about to expire
Diffstat (limited to 'src/mongo/util/net/ssl_manager.h')
-rw-r--r--src/mongo/util/net/ssl_manager.h5
1 files changed, 5 insertions, 0 deletions
diff --git a/src/mongo/util/net/ssl_manager.h b/src/mongo/util/net/ssl_manager.h
index ce7b7d9bfc7..c0a7e1259cb 100644
--- a/src/mongo/util/net/ssl_manager.h
+++ b/src/mongo/util/net/ssl_manager.h
@@ -320,6 +320,11 @@ StatusWith<TLSVersion> mapTLSVersion(SSLConnectionType conn);
*/
void recordTLSVersion(TLSVersion version, const HostAndPort& hostForLogging);
+/**
+ * Emit a warning() explaining that a client certificate is about to expire.
+ */
+void tlsEmitWarningExpiringClientCertificate(const SSLX509Name& peer);
+void tlsEmitWarningExpiringClientCertificate(const SSLX509Name& peer, Days days);
} // namespace mongo
#endif // #ifdef MONGO_CONFIG_SSL