How Security in MongoDB works (using x.509 cert)
<p>I Read through many documents in the mongoDB doc, still unclear how authentication works for clients an member of replica set(using x.509).</p>

<p>Found a resource "<a href="http://pe-kay.blogspot.in/2016/02/securing-mongodb-using-x509-certificate.html" rel="nofollow noreferrer">http://pe-kay.blogspot.in/2016/02/securing-mongodb-using-x509-certificate.html</a>"
which was well documented, still not clear as how authentication happens.</p>

<p>Considering the below mongoConfig and commands for starting server and mongo client:-</p>

<p>mongoConfig.cfg</p>

<pre><code>storage:
    dbPath: "../DB"
  security:
    clusterAuthMode: x509
  net:
    port: 27001
  ssl:
    mode: "requireSSL"
    PEMKeyFile: "../server/security/one.pem"
    clusterFile: "../server/security/one.pem"
    CAFile: "../server/security/rootCA.crt"
</code></pre>

<p>Commands in Prompt:-</p>

<pre><code>cPrompt&gt; mongod -v --config "../custom/mongoConf.cfg" --replSet "one"

cPrompt&gt; mongo -ssl --sslPEMKeyFile "../client/security/oneHost.pem" --sslCAFile "../client/security/rootCA.crt" --host mylocalhost --port 27001
</code></pre>

<p>1) Is it a oneWay or a twoWay SSL/TLS ?</p>

<p>2) How authentication between members of replicaSet takes place (mongod - mongod while doing replication) and between server-client (mongod-mongo say mongoShell or application) ?</p>

<p>3) Which version of TLS is used ?</p>

<p>Can someone explain in detail ?</p>