Docs Home → MongoDB Compass

TLS / SSL Connection Tab“TLS/SSL”连接选项卡

On this page本页内容

The TLS / SSL tab allows you to connect deployments with TLS / SSL. “TLS/SSL”选项卡允许您使用TLS/SSL连接部署。For more information on TLS / SSL, see TLS Options有关“TLS/SSL”的更多信息，请参阅TLS选项

Procedure过程

1

Click Advanced Connection Options.单击“高级连接选项”。

New Advanced Connection Options
2

Click the TLS / SSL tab.单击“TLS/SSL”选项卡。

You can leave TLS unset with the Default option or set the TLS / SSL connection On or Off.您可以使用Default选项使TLS未设置，或者将TLS/SSL连接设置为On或Off。

Option选项Description描述
DefaultThe Default option leaves the TLS option unset. Default选项使TLS选项处于unset状态。The Default / unset TLS /SSL option is enabled when using a DNS seedlist (SRV) in the connection string. 在连接字符串中使用DNS种子列表（SRV）时，将启用Default / unset TLS/SSL选项。To learn more about the additional options available, see Additional TLS / SSL Options.要了解有关其他可用选项的更多信息，请参阅其他TLS/SSL选项。
OnSelect the On option when using a DNS seedlist (SRV) in the connection string. When TLS / SSL Connection is On, you can specify additional certificate options for your connection string. 在连接字符串中使用DNS种子列表（SRV）时，选择On选项。当TLS/SSL连接On时，您可以为连接字符串指定其他证书选项。To see more on the additional certificate options available, see Additional TLS / SSL Options.要查看有关其他可用证书选项的更多信息，请参阅其他TLS/SSL选项。
OffThe Off option initiates a connection without TLS / SSL.Off选项启动“不带TLS/SSL”的连接。

Note

It is recommended that users enable TLS / SSL to avoid security vulnerabilities.建议用户启用TLS/SSL以避免安全漏洞。

Additional TLS / SSL Options其他TLS/SSL选项

When TLS is On you can specify the following:当TLSOn时，您可以指定以下内容：

Option选项Description描述
Certificate Authority证书颁发机构One or more certificate files from trusted Certificate Authorities to validate the certificate provided by the deployment.来自受信任证书颁发机构的一个或多个证书文件，用于验证部署提供的证书。
Client Certificate客户端证书Specifies the location of a local .pem file that contains either the client's TLS/SSL X.509 certificate or the client's TLS/SSL certificate and key.指定本地pem文件的位置，该文件包含客户端的TLS/SSL X.509证书或客户端的TLS/CSL证书和密钥。
Client Key Password客户端密钥密码If the Client Private Key is protected with a password, you must provide the password.如果客户端私钥受密码保护，则必须提供密码。
tlsInsecureDisables various certificate validations.禁用各种证书验证。
tlsAllowInvalidHostnamesDisables hostname validation of the certificate presented by the the deployment.禁用部署提供的证书的主机名验证。
tlsAllowInvalidCertificatesDisable the validation of the server certificates.禁用服务器证书的验证。
Warning

Enabling tlsInsecure, tlsAllowInvalidHostnames, and tlsAllowInvalidCertificates may cause a security vulnerabilty.启用tlsInsecure、tlsAllowInvalidHostnames和tlsAllowInvalidCertificates可能会导致安全漏洞。

3

(Optional) For advanced connection configuration options, click the Advanced tab.（可选）有关高级连接配置选项，请单击“高级”选项卡。

4

Click Connect.单击“连接”。

Tip

See also:

To disconnect from your deployment, see Disconnect from MongoDB.要断开与部署的连接，请参阅断开与MongoDB的连接。