Robomongo: cannot connect to new AWS documentDB instance

Created on 2 Apr 2019  ·  6Comments  ·  Source: Studio3T/robomongo

Hi im unable to connect robo 3t to a AWS documentDB (TLS enabled) instance, the tunnel is working fine and SSL options are correct but i keep getting:

W NETWORK [thread1] The server certificate does not match the host name. Hostname: 127.0.0.1 does not match SAN(s):
"documentDB endpoint"
SSH tunnel closed.

current options:

error

using the exact same configuration (import from robo3t) in studio 3t i can connect to my instance without any problem, very strange

Thanks!

Most helpful comment

macOS Catalina has additional SSL certificate requirements. Make sure that you're not using the SHA1 algorithm in the server SSL certificate:
https://support.apple.com/en-us/HT210176

All 6 comments

I use
image
without issue, if I remember, I had to add a default database in "Advanced", I just added a test, then I was able to connect.

@maxeber
May I know how do you configure it?
I have also tried to Robo 3T 1.3 with/without using the SSH Tunnel to connect AWS documentDB
P.s I also modify the security access for my IP address

Below is my configuration. The SSH Tunnel do not enable.

image

image

image

image

Connection fail:
image

@ckdanny This SO post should unblock you https://stackoverflow.com/questions/54384253/aws-documentdb-with-robo-3t-robomongo

Let me know if you're still stuck and I'll be happy to help.

@swordfish444 I also had the same issue. I imported the pem file into Keychain but now I am getting this when trying to connect:

Cannot connect to the MongoDB at localhost:10000.

Error:
SSL tunnel failure: Network is unreachable or SSL connection rejected by server. Reason: couldn't connect to server localhost:10000, connection attempt failed: SSLHandshakeFailed: SSL peer certificate validation failed: Certificate trust failure: CSSMERR_CSP_ALGID_MISMATCH; connection rejected

I know the SSH tunnel works as I can see data going back and forth on Wireshark. I'm on OS X Catalina. Any ideas?

macOS Catalina has additional SSL certificate requirements. Make sure that you're not using the SHA1 algorithm in the server SSL certificate:
https://support.apple.com/en-us/HT210176

Screen Shot 2020-02-10 at 10 13 20
Changing the Mongo Executable to 3.6 worked for me as AWS DocumentDB is using 3.6.0 Mongo

Was this page helpful?
0 / 5 - 0 ratings