1MONGOC_CLIENT_ENCRYPTION_OPTS_SET_MTOLlNSiG_bOOmCPo_TnCSgL(oI3cE)NT_ENCRYPTION_OPTS_SET_TLS_OPTS(3)
2
3
4
6 mongoc_client_encryption_opts_set_tls_opts - mongoc_client_encryp‐
7 tion_opts_set_tls_opts()
8
10 void
11 mongoc_client_encryption_opts_set_tls_opts (
12 mongoc_client_encryption_opts_t *opts, const bson_t *tls_opts);
13
15 • opts: The mongoc_client_encryption_opts_t
16
17 • tls_opts: A bson_t mapping a Key Management Service (KMS) provider
18 name to a BSON document with TLS options.
19
20 tls_opts is a BSON document of the following form:
21
22 <KMS provider name>: {
23 tlsCaFile: Optional<String>
24 tlsCertificateKeyFile: Optional<String>
25 tlsCertificateKeyFilePassword: Optional<String>
26 }
27
28 The KMS providers aws, azure, gcp, and kmip are supported as keys in
29 the tls_opts document.
30
31 tls_opts maps the KMS provider name to a BSON document for TLS options.
32
33 The BSON document for TLS options may contain the following keys:
34
35 • MONGOC_URI_TLSCERTIFICATEKEYFILE
36
37 • MONGOC_URI_TLSCERTIFICATEKEYFILEPASSWORD
38
39 • MONGOC_URI_TLSCAFILE
40
41 Example use
42
43 mongoc_client_encryption_opts_t *ce_opts =
44 mongoc_client_encryption_opts_new ();
45 bson_t *tls_opts = bson_new ();
46
47 BCON_APPEND (tls_opts, "kmip", "{", MONGOC_URI_TLSCAFILE, "ca1.pem", "}");
48 BCON_APPEND (tls_opts, "aws", "{", MONGOC_URI_TLSCAFILE, "ca2.pem", "}");
49 mongoc_client_encryption_opts_set_tls_opts (ce_opts, tls_opts);
50
51
52 See Configuring TLS for a description of the behavior of these options.
53
54 SEE ALSO:
55 In-Use Encryption
56
57
59 MongoDB, Inc
60
62 2017-present, MongoDB, Inc
63
64
65
66
671.24.3 AMuOgNG1O7C,_C2L0I2E3NT_ENCRYPTION_OPTS_SET_TLS_OPTS(3)