diff options
| author | Shreyas Kalyan <shreyas.kalyan@10gen.com> | 2020-03-17 13:17:24 -0700 |
|---|---|---|
| committer | Evergreen Agent <no-reply@evergreen.mongodb.com> | 2020-03-17 20:56:43 +0000 |
| commit | fd0f5b4d7084a1b61672fb17edf693fedd27b90f (patch) | |
| tree | b481d1ee0f6fd7e177e72e59c18b0fd5b68ac89d /src/mongo/util | |
| parent | 4d91fac171cbe3f2af53d9258965399e648a1947 (diff) | |
| download | mongo-fd0f5b4d7084a1b61672fb17edf693fedd27b90f.tar.gz | |
Revert "SERVER-46413 Add tests for OCSP on Windows and OSX"
This reverts commit 7072788923796e747370621abcd6cb10c381a828.
Diffstat (limited to 'src/mongo/util')
| -rw-r--r-- | src/mongo/util/net/ssl_manager_windows.cpp | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/mongo/util/net/ssl_manager_windows.cpp b/src/mongo/util/net/ssl_manager_windows.cpp index 586d8cf3680..32259b8a27f 100644 --- a/src/mongo/util/net/ssl_manager_windows.cpp +++ b/src/mongo/util/net/ssl_manager_windows.cpp @@ -1358,9 +1358,9 @@ Status SSLManagerWindows::initSSLContext(SCHANNEL_CRED* cred, cred->dwFlags = cred->dwFlags // flags | SCH_CRED_REVOCATION_CHECK_CHAIN // Check certificate revocation | SCH_CRED_SNI_CREDENTIAL // Pass along SNI creds + | SCH_CRED_SNI_ENABLE_OCSP // Enable OCSP | SCH_CRED_NO_SYSTEM_MAPPER // Do not map certificate to user account | SCH_CRED_DISABLE_RECONNECTS; // Do not support reconnects - } else { supportedProtocols = SP_PROT_TLS1_CLIENT | SP_PROT_TLS1_0_CLIENT | SP_PROT_TLS1_1_CLIENT | SP_PROT_TLS1_2_CLIENT; @@ -1370,8 +1370,8 @@ Status SSLManagerWindows::initSSLContext(SCHANNEL_CRED* cred, | SCH_CRED_REVOCATION_CHECK_CHAIN // Check certificate revocation | SCH_CRED_NO_SERVERNAME_CHECK // Do not validate server name against cert | SCH_CRED_NO_DEFAULT_CREDS // No Default Certificate - | SCH_CRED_MEMORY_STORE_CERT // Read intermediate certificates from memory - // store associated with client certificate. + | SCH_CRED_MEMORY_STORE_CERT // Read intermediate certificates from memory store + // associated with client certificate. | SCH_CRED_MANUAL_CRED_VALIDATION; // Validate Certificate Manually } |