Specifying a CA Certificate¶
If a CA certificate has been specified, MongoDB requires a client certificate from each client, i. e. from all Output Engine services that access MongoDB. This requires corresponding properties of the certificate.
-
In an editor, open the MongoDB configuration file:
/opt/seal/etc/mongod.conf
-
Replace the following line:
allowInvalidCertificates: true
by this line:
CAFile: /opt/seal/etc/tls/ca.pem
-
Save the configuration file.
-
Restart MongoDB:
sudo systemctl restart mongod