# ./mongo --version
MongoDB shell version v3.4.13
git version: fbdef2ccc53e0fcc9afb570063633d992b2aae42
allocator: tcmalloc
modules: none
build environment:
    distarch: x86_64
    target_arch: x86_64

在conf中配置ssl

net:
   port: 27017 #監(jiān)聽端口，默認27017
   #bindIp: 127.0.0.1 #綁定監(jiān)聽的ip，deb和rpm包里有默認的配置文件(/etc/mongod.conf)里面默認配置為127.0.0.1,若不限制IP，務必確保認證安全，多個Ip用逗號分隔
   maxIncomingConnections: 65536 #最大連接數(shù)，可接受的連接數(shù)還受限于操作系統(tǒng)配置的最大連接數(shù)
   wireObjectCheck: true #校驗客戶端的請求，防止錯誤的或無效BSON插入,多層文檔嵌套的對象會有輕微性能影響,默認true
   ipv6: false #是否啟用ipv6,3.0以上版本始終開啟
   unixDomainSocket: #unix socket監(jiān)聽，僅適用于基于unix的系統(tǒng)
      enabled: false #默認true
      pathPrefix: /tmp #路徑前綴，默認/temp
      filePermissions: 0700 #文件權限 默認0700
   ssl: 
      mode: requireSSL
      PEMKeyFile: /opt/webplatform/server/mongossl/mongodb.pem
      CAFile: /opt/webplatform/server/mongossl/client.pem

運行mongod，提示：

# ./mongod -f /data/mongodb34/mg.conf
Unrecognized option: net.ssl.mode
try './mongod --help' for more information

補充db.serverBuildInfo()

{
        "version" : "3.4.13",
        "gitVersion" : "fbdef2ccc53e0fcc9afb570063633d992b2aae42",
        "modules" : [ ],
        "allocator" : "tcmalloc",
        "javascriptEngine" : "mozjs",
        "sysInfo" : "deprecated",
        "versionArray" : [
                3,
                4,
                13,
                0
        ],
        "openssl" : {
                "running" : "disabled",
                "compiled" : "disabled"
        },