Remove insecure ssl options from MongoDBIO
Open
backward-incompatible
improvement
io
java
mongodb
P2
- Dominant language
- Java
- Stars
- 8.7k
- Forks
- 4.7k
- Avg merge
- 2d 2h
- Merged PRs (30d)
- 205
Description
The option MongoDBIO.withIgnoreSSLCertificate and withSSLInvalidHostNameAllowedslInvalidHostNameAllowed() are insecure by design. We should not encourage users to be able to use them so better to remove these options.
Imported from Jira [BEAM-9564](https://issues.apache.org/jira/browse/BEAM-9564). Original Jira may contain additional context.
Reported by: iemejia.
Contributor guide
Research direction
Start by locating MongoDBIO and the references to withIgnoreSSLCertificate and withSSLInvalidHostNameAllowedslInvalidHostNameAllowed(), then review the linked BEAM-9564 Jira issue for context. Done means both insecure options are removed from the MongoDBIO API and their remaining references are addressed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, mongodb
- Domain
- databases, security
- Issue type
- Refactor
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100