summaryrefslogtreecommitdiff
path: root/src/mongo/db/startup_warnings_common.cpp
diff options
context:
space:
mode:
Diffstat (limited to 'src/mongo/db/startup_warnings_common.cpp')
-rw-r--r--src/mongo/db/startup_warnings_common.cpp21
1 files changed, 21 insertions, 0 deletions
diff --git a/src/mongo/db/startup_warnings_common.cpp b/src/mongo/db/startup_warnings_common.cpp
index 2b395f87d03..0c73f543064 100644
--- a/src/mongo/db/startup_warnings_common.cpp
+++ b/src/mongo/db/startup_warnings_common.cpp
@@ -121,6 +121,27 @@ void logCommonStartupWarnings(const ServerGlobalParams& serverParams) {
}
#endif
+ /*
+ * We did not add the message to startupWarningsLog as the user can not
+ * specify a sslCAFile parameter from the shell
+ */
+ if (sslGlobalParams.sslMode.load() != SSLParams::SSLMode_disabled &&
+#ifdef MONGO_CONFIG_SSL_CERTIFICATE_SELECTORS
+ sslGlobalParams.sslCertificateSelector.empty() &&
+#endif
+ sslGlobalParams.sslCAFile.empty()) {
+#ifdef MONGO_CONFIG_SSL_CERTIFICATE_SELECTORS
+ LOGV2_WARNING(22132,
+ "No client certificate validation can be performed since no CA file has been "
+ "provided and no sslCertificateSelector has been specified. Please specify "
+ "an sslCAFile parameter");
+#else
+ LOGV2_WARNING(22133,
+ "No client certificate validation can be performed since no CA file has been "
+ "provided. Please specify an sslCAFile parameter");
+#endif
+ }
+
#if defined(_WIN32) && !defined(_WIN64)
// Warn user that they are running a 32-bit app on 64-bit Windows
BOOL wow64Process;