diff options
| author | Spencer Jackson <spencer.jackson@mongodb.com> | 2015-04-13 17:36:00 -0400 |
|---|---|---|
| committer | Spencer Jackson <spencer.jackson@mongodb.com> | 2015-04-16 12:59:29 -0400 |
| commit | a7c0c18303f0e485e0b4006454511ab9919def83 (patch) | |
| tree | a4faec0e11d717ee014cbe5dc9fe8bc863273ec8 /src/mongo/util/net/ssl_options.h | |
| parent | e34ce3f561231755644bc2fad9e95d9b075a31e1 (diff) | |
| download | mongo-a7c0c18303f0e485e0b4006454511ab9919def83.tar.gz | |
SERVER-17591: Allow TLS protocols to be disabled
Diffstat (limited to 'src/mongo/util/net/ssl_options.h')
| -rw-r--r-- | src/mongo/util/net/ssl_options.h | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/mongo/util/net/ssl_options.h b/src/mongo/util/net/ssl_options.h index d2f2a79bc9a..70bab550652 100644 --- a/src/mongo/util/net/ssl_options.h +++ b/src/mongo/util/net/ssl_options.h @@ -40,6 +40,11 @@ namespace mongo { namespace moe = mongo::optionenvironment; struct SSLParams { + enum class Protocols { + TLS1_0, + TLS1_1, + TLS1_2 + }; AtomicInt32 sslMode; // --sslMode - the SSL operation mode, see enum SSLModes bool sslOnNormalPorts; // --sslOnNormalPorts (deprecated) std::string sslPEMKeyFile; // --sslPEMKeyFile @@ -49,6 +54,7 @@ namespace mongo { std::string sslCAFile; // --sslCAFile std::string sslCRLFile; // --sslCRLFile std::string sslCipherConfig; // --sslCipherConfig + std::vector<Protocols> sslDisabledProtocols; // --sslDisabledProtocols bool sslWeakCertificateValidation; // --sslWeakCertificateValidation bool sslFIPSMode; // --sslFIPSMode bool sslAllowInvalidCertificates; // --sslAllowInvalidCertificates |