CDRIVER 1.3.5 SSL Behavior

[John Myers]

Hi,

I recently updated from CDRVER 1.1 to 1.3.5, was there a change in default connection behavior for SSL? I am using the URI connection string and with 1.3.5, all connections to the server are being attempted as SSL, even though my URI string does not have the "ssl=true" value set.

I get this error from the CDRIVER (which I believe to be totally incorrect...): No suitable servers found (`serverselectiontryonce` set): [connection timeout calling ismaster on '172.17.0.1:27017']

mongod itself says this:

2016-04-28T20:15:31.048+0000 I NETWORK  [initandlisten] connection accepted from 172.17.0.1:52019 #212 (11 connections now open)

2016-04-28T20:15:31.048+0000 I NETWORK  [conn212] AssertionException handling request, closing client connection: 17132 SSL handshake received but server is started without SSL support

When I revert back to 1.1, everything works as expected.

Thanks,

John

[Wan Bachtiar]

I recently updated from CDRVER 1.1 to 1.3.5, was there a change in default connection behavior for SSL?

Hi John,

I ran a test by installing MongoDB C Driver v1.3.5 on Ubuntu 14.04 LTS. I’ve installed using both methods, the release tarball 1.3.5 and also from Git branch 1.3.5.

Using the sample find code from the tutorial works as expected. i.e. By not specifying ssl=true on the MongoURI, the connection is attempted as without SSL.

To replicate the issue, could you provide the following:

• MongoDB version and Operating System.
• How the driver was built, and any relevant build options. i.e. --enable-ssl
• A simplified version of your code.

Kind regards,

Wan.

​

[Derick Rethans]

On Thu, 28 Apr 2016, John Myers wrote:

> Hi,
>
> I recently updated from CDRVER 1.1 to 1.3.5, was there a change in default
> connection behavior for SSL? I am using the URI connection string and with
> 1.3.5, all connections to the server are being attempted as SSL, even
> though my URI string does not have the "ssl=true" value set.
>
> I get this error from the CDRIVER (which I believe to be totally
> incorrect...): No suitable servers found (`serverselectiontryonce` set):
> [connection timeout calling ismaster on '172.17.0.1:27017']

Error message improvements related to SSL are being tracked in:
https://jira.mongodb.org/browse/CDRIVER-841

I'll leave it to Wan to debug the issue with you.

cheers,
Derick

--
{
website: [ "http://mongodb.org", "http://derickrethans.nl" ],
twitter: [ "@derickr", "@mongodb" ]
}