如何使用 Java 连接到启用 SSL 和身份验证的 MongoDB

Question

问题：我有 CA 证书作为cafile.pem，PEM 证书作为mongodb.pem。我不确定如何在 java 中使用它来验证和连接 MongoDB。任何建议将不胜感激。如果您想提供更多信息，请告诉我。设想：我正在使用mongo-java-driver-3.4.3.jar连接到启用 SSL、启用身份验证的 MongoDB 3.7.9 分片集群，其中包含 3 个实例。下面是我试图连接到该服务器的 Java 代码。import java.util.ArrayList;import java.util.List;import org.bson.Document;import com.mongodb.MongoClient;import com.mongodb.MongoClientOptions;import com.mongodb.MongoCredential;import com.mongodb.ReadPreference;import com.mongodb.ServerAddress;import com.mongodb.client.MongoCollection;import com.mongodb.client.MongoDatabase;public class Starter {    public static void main(String[] args){        List<MongoCredential> mongoCredentials = new ArrayList<MongoCredential>();        mongoCredentials.add(MongoCredential.        createScramSha1Credential("admin", "admin", "admin".toCharArray()));        List<ServerAddress> serverAddressArray = new ArrayList<ServerAddress>();        serverAddressArray.add(new ServerAddress("xyz.domain.com", 27017));        MongoClientOptions options = new MongoClientOptions.Builder()                                        .sslInvalidHostNameAllowed(false)                                        .sslEnabled(true)                                        .readPreference(ReadPreference.primaryPreferred())                                        .build();        MongoClient mongoClient = new MongoClient(serverAddressArray, mongoCredentials, options);        try {            System.out.println("----- Step 1 ------");            MongoDatabase db = mongoClient.getDatabase("CIM");            System.out.println("----- Step 2 ------");            MongoCollection<Document> collection = db.getCollection("orders");            System.out.println("No of Documents in orders collection: " + collection.count());          } catch (Exception ex) {              System.out.println(ex.getMessage());          }    }       }无论如何，我可以在 RoboMongo3T 中按照以下配置连接 MongoServer。

Answer 1

我首先使用 command创建了一个mongodb.pkcs12文件openssl pkcs12 -export -out mongodb.pkcs12 -in mongodb.pem。

我必须在下面的代码中将此文件包含在keyStore和trustStore的文件路径中（注意：我的代码也已更改并最小化）。

import org.bson.Document;

import com.mongodb.MongoClient;

import com.mongodb.MongoClientURI;

import com.mongodb.client.MongoCollection;

import com.mongodb.client.MongoDatabase;

public class Starter {

    private static MongoClient mongoClient;

    public static void main(String[] args) {

        System.setProperty("javax.net.ssl.trustStore", "mongodb.pkcs12");

        System.setProperty("javax.net.ssl.trustStorePassword", "yourPassword");

        System.setProperty("javax.net.ssl.keyStore", "mongodb.pkcs12");

        System.setProperty("javax.net.ssl.keyStorePassword", "yourPassword");

        MongoClientURI mongoClientURI = new MongoClientURI(

                "mongodb://admin:[e-mail],hostname2.xyz.com:27017,hostname3.xyz.com:27017/admin?ssl=true");

        mongoClient = new MongoClient(mongoClientURI);

        try {

            MongoDatabase db = mongoClient.getDatabase("CIM");

            MongoCollection<Document> collection = db.getCollection("orders");

            System.out.println("No of Documents in orders collection: "

                    + collection.count());

        } catch (Exception ex) {

            System.out.println(ex.getMessage());

        }

    }

}

上面的代码运行良好，下面是我得到的输出，

    Sep 24, 2018 3:49:13 PM com.mongodb.diagnostics.logging.JULLogger log

    INFO: Discovered cluster type of SHARDED

    Sep 24, 2018 3:49:15 PM com.mongodb.diagnostics.logging.JULLogger log

    INFO: Opened connection [connectionId{localValue:4}] to hostname3.xyz.com:27017

    No of Documents in orders collection: 3