SSL support for connecting to mongodb instances

[alistair]

This adds support for connecting to mongodb instances which are configured to use ssl.

The implementation supports 2 new properties within the options collection, ssl and sslverifycertificate. The naming of these variables is consistent with mongodb drivers (specifically the C# one).

The ssl enables secure sockets while sslverifycertificate bypasses the certificate store when set to false. By default these are false and true respectively.

e.g of configuration.
"options": { "ssl" : true, "sslverifycertificate" : false },

I have attempted to investigate whether I could update the unit tests to support starting up the mongod instances in ssl mode, but the currently mongod binaries are not compiled to support this feature.

[buildhive]

Richard Louapre » elasticsearch-river-mongodb #31 UNSTABLE
Looks like there's a problem with this pull request
(what's this?)

[alistair]

Re the unit test failing. This seems to be an issue which was present before this pull request. I can't reproduce locally as all tests pass.

[richardwilly98]

Hi,

I will take a look tonight or tomorrow.

Thanks,
Richard.

Sent via BlackBerry by AT&T

-----Original Message-----
From: Alistair [email protected]
Date: Sun, 23 Jun 2013 13:02:26
To: richardwilly98/elasticsearch-river-mongodbelasticsearch-river-mongodb@noreply.github.com
Reply-To: richardwilly98/elasticsearch-river-mongodb [email protected]
Subject: Re: [elasticsearch-river-mongodb] SSL support for connecting to
mongodb instances (#94)

Re the unit test failing. This seems to be an issue which was present before this pull request. I can't reproduce locally as all tests pass.

---

Reply to this email directly or view it on GitHub:
#94 (comment)

[richardwilly98]

Hi,

Thanks for the PR.

The build in buildhive does not seem to be very stable (mainly because MongoDB documents stored in ES are not immediately available - even if I make sure to force index refresh after each insert).

I have just made one small change the attribute name will be ssl_verify_certificate and not sslverifycertificate (to keep the same naming convention).

Regarding unit test with SSL I don't believe it will be easy to implement in the near future (as it requires MongoDB Enterprise or rebuild the open source version).

Thanks,
Richard.

[richardwilly98]

This feature is available in release 1.6.11.

Thanks,
Richard.

[gl00ten]

So guys, how does one actually select/use a certificate?

[richardwilly98]

That should help [1]

[1] - http://vafer.org/blog/20061010073725/