SERVER-14977: add new alias for sslWeakCertificateValidation option

1 files changed, 9 insertions, 0 deletions

diff --git a/src/mongo/util/net/ssl_options.cpp b/src/mongo/util/net/ssl_options.cpp
index d90e5540fcd..6e83c17e87d 100644
--- a/src/mongo/util/net/ssl_options.cpp
+++ b/src/mongo/util/net/ssl_options.cpp
@@ -71,6 +71,11 @@ namespace mongo {
                 "sslWeakCertificateValidation", moe::Switch, "allow client to connect without "
                 "presenting a certificate");
 
+        // Alias for --sslWeakCertificateValidation.
+        options->addOptionChaining("net.ssl.allowConnectionsWithoutCertificates",
+                "sslAllowConnectionsWithoutCertificates", moe::Switch,
+                "allow client to connect without presenting a certificate");
+
         options->addOptionChaining("net.ssl.allowInvalidHostnames", "sslAllowInvalidHostnames",
                 moe::Switch, "Allow server certificates to provide non-matching hostnames");
 
@@ -224,6 +229,10 @@ namespace mongo {
             sslGlobalParams.sslWeakCertificateValidation =
                 params["net.ssl.weakCertificateValidation"].as<bool>();
         }
+        else if (params.count("net.ssl.allowConnectionsWithoutCertificates")) {
+            sslGlobalParams.sslWeakCertificateValidation =
+                params["net.ssl.allowConnectionsWithoutCertificates"].as<bool>();
+        }
         if (params.count("net.ssl.allowInvalidHostnames")) {
             sslGlobalParams.sslAllowInvalidHostnames =
                 params["net.ssl.allowInvalidHostnames"].as<bool>();