1153344 - Allow Mongo connections over SSL.

https://bugzilla.redhat.com/show_bug.cgi?id=1153344
On 10/24/2014 06:36 PM, bmbouter wrote:
> If these are left blank then it's inconsistent with the [messaging] and
> [tasks] section. Those sections don't contain blank defaults for the
> same reason this one shouldn't. We have a script that creates
> self-signed serts that align with the default. We could introduce
> something similar to that in the future, at which point a default would
> be good.

You can't use self-signed certs for client certificates. There isn't a
tangible benefit to having these default that I can think of, and it
also doesn't matter where users store these certs.

> Also, there is a consistency argument in favor of defaults so that it is
> consistent with the [messaging] and [tasks] sections. It would be
> strange for us to not be consistent and apple the same thinking with the
> same settings for different components in the same file.

I think defaults are good when a choice must be made. In this case, it's
not necessary for a choice to be made. If the user doesn't fill this
out, we don't try to use client certs when connecting. In fact, you
could say that we default to not using client certificates, even without
having a default explicitly listed in our config.py. It's not like
verify_ssl where we have to know one way or the other whether the user
wants to verify. When we have to know, we have a default.