X.509 Authentication MechanismX.509认证机制

Overview概述

In the X.509 authentication mechanism, the server and client use the TLS protocol to exchange X.509 public-key certificates. You can use this mechanism to authenticate to MongoDB Atlas, MongoDB Enterprise Advanced, and MongoDB Community Edition.在X.509认证机制中，服务器和客户端使用TLS协议交换X.509公钥证书。您可以使用此机制对MongoDB Atlas、MongoDB企业高级版和MongoDB社区版进行身份验证。

Specify X.509 Authentication指定X.509身份验证

You can specify this authentication mechanism by setting the following parameters of your connection string:您可以通过设置连接字符串的以下参数来指定此身份验证机制：

• Set the authMechanism parameter to MONGODB-X509将authMechanism参数设置为MONGODB-X509
• Set the tls parameter to true将tls参数设置为true

Pass the location of your client certificate file as the value of tlsCertificateKeyFile as a parameter of the connection URI.将客户端证书文件的位置作为tlsCertificateKeyFile的值作为连接URI的参数传递。

const { MongoClient } = require("mongodb");

// Replace the following with values for your environment.将以下内容替换为您的环境值。
const clusterUrl = "<cluster_url>";
const clientPEMFile = encodeURIComponent("<pem_certificate_file_path>");

const authMechanism = "MONGODB-X509";

// Replace the following with your MongoDB deployment's connection string.将以下内容替换为MongoDB部署的连接字符串。
const uri =
  `mongodb+srv://${clusterUrl}/?authMechanism=${authMechanism}&tls=true&tlsCertificateKeyFile=${clientPEMFile}`;

// Create a new MongoClient创建一个新的MongoClient
const client = new MongoClient(uri);

// Function to connect to the server连接到服务器的功能
async function run() {
  try {
    // Establish and verify connection建立并验证连接
    await client.db("admin").command({ ping: 1 });
    console.log("Connected successfully to server");
  } finally {
    // Ensures that the client will close when you finish/error确保客户端在您完成/出错时关闭
    await client.close();
  }
}
run().catch(console.dir);