Page History: Configuring Encryption in Transit - Mongo DB

Compare Page Revisions

35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 Current 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0

« Older Revision - Back to Page History - Newer Revision »

Page Revision: Thu, Jul 14, 2016, 12:28 PM

Overview¶

This article provides the steps to take to configure encryption in transit for Mongo DB.

Procedure¶

Create the Root Certificate Authority Certificate¶

This part of the procedure should be done on a PROTECTED machine -- i.e., NOT the Mongo DB or web server.

1. Generate an RSA key pair

openssl genrsa -out MyRootCA.key 2048

2. Generate the Root CA Certificate

openssl req -x509 -new -key MyRootCA.key -days 365 -out MyRootCA.crt

3. Concatenate the CRT and KEY files into a PEM file

Windows

type MyRootCA.crt MyRootCA.key > MyRootCA.pem

Linux

cat MyRootCA.crt MyRootCA.key > MyRootCA.pem