无法使用来自c的x509证书身份验证连接到MongoDB服务器#

Question

我已经按照文档中的说明配置了MongoDB服务器https://docs.mongodb.com/manual/core/security-x.509/我使用mongo shell连接，工作正常。

接下来，我尝试连接到相同的服务器form c#驱动程序，但引发超时异常。下面是我的代码

var cert = new X509Certificate2(@"C:\Program Files\MongoDB\Server\3.2\ssl\client.pfx", "secretkey");
            var sslcrd = MongoCredential.CreateMongoX509Credential("CN=Client1,O=School,ST=Some-State,C=IN");
            settings.SslSettings = new SslSettings() ; 
            settings.UseSsl = true;
            settings.SslSettings.ClientCertificates = new List<X509Certificate>()
    {
        cert
    };
            settings.SslSettings.EnabledSslProtocols = SslProtocols.Default;
            settings.SslSettings.ClientCertificateSelectionCallback =
                (sender, host, certificates, certificate, issuers) => settings.SslSettings.ClientCertificates.ToList()[0];
            settings.SslSettings.ServerCertificateValidationCallback = (sender, certificate, chain, errors) => true;
            settings.SslSettings.CheckCertificateRevocation = false;
            settings.VerifySslCertificate = false;
            settings.Credentials = new[] { sslcrd };

            MongoClient client = new MongoClient(settings);
            var db = client.ListDatabases().ToList();

我通过MongoDB服务器日志，我可以看到下面的错误

2017-04-10T11:18:21.559 0530 I网络[initandlisten]连接已从127.0.0.1:53901#64（1个连接现已打开）接受2017-04-10T11:18:21.559 0530 E网络[conn64]对等方未提供SSL证书；连接被拒绝2017-04-10T11:18:21.560 0530 I网络[conn64]结束连接127.0.0.1:53901（0个连接现在打开）

我用的是c#MongoDB。驱动程序版本2.3.0和MongoDB包是版本3.2。

如果你有以上问题的解决方案，请回复。

Answer 1

将allowConnectionsWithoutCertificates的值设置为false。此外，还需要将证书和密钥文件组合在一起。