SSL Certificate Validation & Handling Security Improved

As of MongoChef 4.5, we added support for MongoDB 3.4. The introduction of the 3.4 MongoDB driver has brought about quite a few bugfixes and changes one of which is an upgrade on the security of SSL certificate handling.

MongoChef will make sure that the certificate presented by the server indeed belongs to the server. The SSL/TLS protocol is now more strictly adhered to.

In order to download the latest MongoChef, choose the appropriate link below:

However…

… some SSL connections may now fail to work if not properly configured.

Each certificate protects a specific entity stated in the Subject Name field (CN) in the certificate – see https://support.dnsimple.com/articles/what-is-common-name/. Such a common name represents the entity protected by the SSL certificate. The certificate is valid only if the requested hostname matches the certificate’s common name.

If this is not the case, MongoChef will now by default not allow the connection.

SSL Connection Issues

If you are having problems connecting, it may be that you are connecting to a MongoDB server by IP (and not by CN) which is different than the CN. The protocol looks for alternative names that may match that IP address xx.xx.xx.xx but none is found. As a result, an error like “CertificateException: No subject alternative names present” is given.

A way to test this is to connect by name rather than IP: e.g. “my-ssl-mongod.server.com” instead of the IP “xx.xx.xxx.xx”. You have to make sure that this name resolves to the correct IP. If the local DNS does not do this it will have to be entered in the local OS’ hosts file – e.g. /etc/hosts in unix systems.

Another reason the connection may not be working anymore is that the server’s certificate (and/or the PEM client key file you are using – if any) is invalid. This is usually due to the use of a certificate which was not generated with a proper CN. Note that this may also mean that you are the target of a MITM (man-in-the-middle) attack.

How to Override

For our users’ convenience, we have added a new SSL option in the latest MongoChef 4.5.2 release. It will set your connection to also allow invalid hostnames which will emulate the connection behavior of MongoChef 4.4.x.

SSL Allow Invalid Hostnames

IntelliShell: Your Intelligent MongoDB Shell

Use IntelliShell to access the power of the shell in the beautiful MongoChef environment. Enjoy MongoChef’s intelligent auto-completion, including auto-completion of shell methods and document field names.

IntelliShell output is editable with MongoChef’s in-place editors and can always be exported to a file or copied to another collection.

Select a collection, click the IntelliShell button in the main tool bar and check it out!

Find out more about IntelliShell on our blog: Getting Started with MongoChef’s IntelliShell

 

IntelliShell: Your Intelligent MongoDB Shell

MongoDB Map-Reduce with MongoChef

Use the Map-Reduce Screen to create and run map-reduce operations easily, with greater confidence and accuracy.

At any time, you can view the input and the output for the map, reduce, and finalize functions, making it simple to build even the most complex map-reduce jobs.

Select a collection, click the Map-Reduce button in the main tool bar and check it out!

 

MongoDB Map-Reduce with MongoChef

MongoDB Aggregation with MongoChef

Use the Aggregation Screen to create and run aggregation queries.

At any time, you can view the documents that are input to and output from any stage in the pipeline, making it simple to keep track of the precise form of the data you are working at each stage, allowing you to write queries more quickly, with greater confidence and accuracy.

Select a collection, click the Aggregate button in the main tool bar and check it out!

Find out more about MongoDB Aggregation on our blog: MongoDB Aggregation with MongoChef

 

MongoDB Aggregation with MongoChef

In-Place Editor

You can easily edit your data in-place in both the Tree Viewer and the Table Viewer. Double-click anywhere in your document, on a key or on a value, and modify the data in-place.
Live preview will guide you when working with more complex data types.

In-Place-Editor Media

Visual Query Builder

No need for those parentheses and curly braces :-)
Use the integrated Visual Query Builder:

  1. Open any collection.
  2. Click the Query Builder button.
  3. Drag and drop a field from your data onto the Query Builder panel.
  4. Click the Run button to run your search.

BTW: You can also store your queries for easy recall.

Copy & Paste Collections

Easily Copy & Paste collections across databases and servers.

  1. Right-click a collection you’d like to copy and select Copy Collection
  2. Right-click the target collection or database and select Paste Collection
  3. That’s it. It’s done!

BTW: The Operations panel will display the progress of long running operations.

Copy & Paste Collections

Export Connection Details to a MongoDB URI

Easily share connection details with your colleagues. You can choose if you want to include passwords and extensions used by 3T MongoChef (e.g. SSH configuration details).

Export Connection Details to a MongoDB URI

How-To Videos

We’ve set up a YouTube channel with How-To videos for 3T MongoChef. It’s still young but worth checking out, e.g. to find out how to manage your MongoDB users with MongoChef.

YouTube

3T MongoChef @ YouTube