We’re happy to announce that you can now bring your own SSL certificates to configure on your MongoDB clusters. This enables you to have end-to-end control over the SSL infrastructure of your application setup.
Obtain wildcard certificates for a relevant subdomain of your domain namespace. E.g. *.mongoservers.mycompany.now. (If you have a single cert that supports multiple CNAME’s that will work as well).
Setup CNAME’s for each of your servers. E.g. If you have a three node replica set named ‘testcluster’:
mongoserver1.mongoservers.mycompany.com => sg-testcluster-1235-servers.scalegrid.io
mongoserver2.mongoservers.mycompany.com => sg-testcluster-1236-servers.scalegrid.io
mongoserver3.mongoservers.mycompany.com => sg-testcluster-1237-servers.scalegrid.io
Configure Certificates in ScaleGrid UI
Input the Private Key and the Public Key of your SSL Certs
Connect to your MongoDB Cluster:
mongo -u <user> -p <password> mongoserver1.mongoservers.mycompany.com/<db> --ssl --sslCAFile <path to cert chain>
If you have further questions, please feel free to reach out to us at firstname.lastname@example.org.