Wont connect to mongodb atlas due to ssl

[redimongo]

This is the full error in full, I switched from Mongo PHP driver to MongoDB driver for PHP and it seems to say that I can't make the SSL connection, however in robomongo another app I turn ssl off for that.

But I would rather keep ssl on, how would one go about fixing this issue please.

Fatal error: Uncaught exception 'MongoDB\Driver\Exception\SSLConnectionException' with message 'MongoDB\Driver\Manager::selectServer(): SSL operation failed with code 1.
OpenSSL Error messages: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed' in /home/petfindr/public_html/new/vendor/mongodb/mongodb/src/Collection.php:464

Stack trace:
#0 /home/petfindr/public_html/new/vendor/mongodb/mongodb/src/Collection.php(464): MongoDB\Driver\Manager->selectServer(Object(MongoDB\Driver\ReadPreference)
#1 /home/petfindr/public_html/new/configs/core.php(23): MongoDB\Collection->findOne(Array)
#2 /home/petfindr/public_html/new/index.php(95): syscore->testDBConnection()
#3 {main} thrown in /home/petfindr/public_html/new/vendor/mongodb/mongodb/src/Collection.php on line 464

[bjori]

Which operating system and version are you using?
Also, what connection string (and eventually any context options?) did you use?

Off the top of my head, I can only see this happening if your distribution doesn't include any trusted certificate authorities, in which case you would have to install a ca-bundle like the Mozilla extracts. Most distros install it by default though. Atlas uses certificates that are issued by authorities which are in most of these bundles.

[redimongo]

I sloved that issue by sslWeakCertificateValidation=true in the option section of the connection.

However I am having now this issue

Fatal error: Uncaught exception 'MongoDB\Driver\Exception\ConnectionTimeoutException' with message 'No suitable servers found (serverselectiontryonceset): [connection error calling ismaster on 'luxemassage-shard-00-00-0kahc.mongodb.net:27017'] [connection error calling ismaster on 'luxemassage-shard-00-01-0kahc.mongodb.net:27017'] [Server closed connection. calling ismaster on 'luxemassage-shard-00-02-0kahc.mongodb.net:27017']' in /home/petfindr/public_html/new/vendor/mongodb/mongodb/src/Collection.php:464 Stack trace: #0 /home/petfindr/public_html/new/vendor/mongodb/mongodb/src/Collection.php(464): MongoDB\Driver\Manager->selectServer(Object(MongoDB\Driver\ReadPreference)) #1 /home/petfindr/public_html/new/configs/core.php(28): MongoDB\Collection->findOne(Array) #2 /home/petfindr/public_html/new/index.php(104): syscore->testDBConnection() #3 {main} thrown in /home/petfindr/public_html/new/vendor/mongodb/mongodb/src/Collection.php on line 464

[bjori]

You should absolutely never ever set sslWeakCertificateValidation=true as that is critically dangerous to your security. It allows evil people to trivially exploit your application.

I think you may have forgotten to configure the IP whitelist. Please login to Atlas and make sure you outbound ipaddress is allowed to connect to the cluster.
See https://docs.atlas.mongodb.com/setup-cluster-security/

Please also answer the questions above:

• Which operating system and version are you using?
• Also, what connection string (and eventually any context options?) did you use?

[jmikola]

@redimongo: Is there any follow up to the previous questions? I'll also note that 1.2.0 of the extension has been released, so it'd be worth testing that as well if you're still encountering issues. In contrast to the 1.1.x driver versions, 1.2.0 no longer relies on PHP for SSL and will instead use the system OpenSSL installation through libmongoc directly.

[Jeff-Lewis]

I'm having trouble connecting to Atlas as well with PHP. Connect fine using other libs and MongoChef so whitelisting is not the issue.

• Windows 10
• PHP 5.6.29
• mongodb.dll ext 1.2.2
• "mongodb/mongodb": "^1.1.0" from composer

Error fetching Mongo. DB:myDB Coll:myCollection Error:No suitable servers found (`serverSelectionTryOnce` set): 
[TLS handshake failed: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed calling ismaster on 'myShard.mongodb.net:27017'] 
[TLS handshake failed: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed calling ismaster on 'myShard.mongodb.net:27017'] 
[TLS handshake failed: error:14090086:SSL routines:ssl3_get_serve query:{"theField":"theValue"} fields:{"projection":{"_id":1,"theField":1}}
exception 'MongoDB\Driver\Exception\ConnectionTimeoutException' with message 'No suitable servers found (`serverSelectionTryOnce` set): 
[TLS handshake failed: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed calling ismaster on 'myShard.mongodb.net:27017'] 
[TLS handshake failed: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed calling ismaster on 'myShard.mongodb.net:27017'] 
[TLS handshake failed: error:14090086:SSL routines:ssl3_get_serve' in C:\theapp\vendor\mongodb\mongodb\src\Collection.php:498
Stack trace:
#0 C:\theapp\vendor\mongodb\mongodb\src\Collection.php(498): MongoDB\Driver\Manager->selectServer(Object(MongoDB\Driver\ReadPreference))
#1 C:\theapp\MyMongoClass.php(143): MongoDB\Collection->find(Array, Array)

The sanitized url:

mongodb://theUser:thePassword@myShard.mongodb.net:27017,myShard.mongodb.net:27017,myShard.mongodb.net:27017/admin?ssl=true&replicaSet=myReplicaset&authSource=admin

[jmikola]

@Jeff-Lewis: Please open a new issue, as you're using a different platform a driver version than the OP.

[jmikola]

Closing this due to inactivity.