MongoDB Administrator's Guide

How it works...

Although explaining how an SSL/TLS connection works would be out of the scope of this book, I will still try to give a short description of what we are trying to accomplish here. We begin by creating a CA  public (ca.crt) and private key (ca.key). The private key will be used to sign any subsequent SSL certificates and can be verified by the CA's public key. In step 1, we use the openssl command to create our own CA key and certificate.

Creating self-signed certificates to be used by servers and clients using this CA is a three-step process. First, as shown in step 2, we generate a private key for our server, where we are going to start the mongod instance. Next, as shown in step 3, we create a CSR, also known as the CSR for ...