DOCS-10445 opensslCipherConfig

mongodb · Aug 7, 2017 · 3014831 · 3014831
1 parent 85dec7e
commit 3014831
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/source/reference/parameters.txt b/source/reference/parameters.txt
@@ -148,6 +148,22 @@ Authentication Parameters
 
    Defaults to 30 seconds.
 
+.. parameter:: opensslCipherConfig
+
+   .. versionadded:: 3.4.7
+
+   Specify the cipher string for OpenSSL when using TLS/SSL encryption.
+   For a list of cipher strings, see
+   `https://wiki.openssl.org/index.php/Manual:Ciphers(1)#CIPHER_STRINGS`_
+
+   You can only set :parameter:`opensslCipherConfig` during start-up, and
+   cannot change this setting using the :dbcommand:`setParameter`
+   database command.
+
+   .. code-block:: sh
+
+      mongod --setParameter opensslCipherConfig=HIGH:!EXPORT:!aNULL@STRENGTH --sslMode requireSSL --sslPEMKeyFile Certs/server.pem
+
 .. parameter:: saslauthdPath
 
    .. note:: Available only in MongoDB Enterprise (except MongoDB Enterprise for Windows).