Mongo: how to configure TLS/SSL for mongod

[zhenwan]

Is there a documentation on configuring TLS/SSL for mongod?

I found this doc
https://docs.mongodb.com/manual/tutorial/configure-ssl/

but I could not find the instruction for Mongo docker image

[yosifkit]

It will be the same as the doc from MongoDB goes through:

• generate the cert and create the pem file
  
  
  
  • just follow their documentation
  
  
• then run monogd with the cert

$ # their example
$ mongod --sslMode requireSSL --sslPEMKeyFile /etc/ssl/mongodb.pem <additional options>

$ # translate that to use the the docker image:
$ # mount in the pem (or use something like docker secrets to add it to the container)
$ # add mongd flags after the image name and they will be passed along (or mount in a config file and tell mongo where it is)
$ docker run -d -v /path/to/pem/:/etc/ssl/ mongo:3.6 --sslMode requireSSL --sslPEMKeyFile /etc/ssl/mongodb.pem <additional options>

[zhenwan]

This works, thanks