# Configuring TLS for Percona mongodb sharding setup

**URL:** <https://forums.percona.com/t/configuring-tls-for-percona-mongodb-sharding-setup/19281>\
**Category:** Percona Operator for MongoDB\
**Tags:** mongodb\
**Created:** [December 23, 2022, 11:13am UTC](https://forums.percona.com/t/configuring-tls-for-percona-mongodb-sharding-setup/19281 "2022-12-23T11:13:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![karthik\_nathan](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/karthik_nathan/32/8805_2.png) [@karthik\_nathan](https://forums.percona.com/u/karthik_nathan)\
**Post date:** [December 23, 2022, 11:13am UTC](https://forums.percona.com/t/configuring-tls-for-percona-mongodb-sharding-setup/19281/1 "2022-12-23T11:13:24Z")

</div>

I tried to setup TLS authentication for my sharded cluster. Created a secret with base64 encoded cert keys. The encoded certs are in format of ca.crt tls.crt and tls.key

apiVersion: v1  
data:  
ca.crt: XXXXXX  
tls.crt: XXXXXX  
tls.key: XXXXXX  
kind: Secret  
name: my-testdb-psmdb-mongo  
namespace: percona-operator  
type: [kubernetes.io/tls](http://kubernetes.io/tls)

And mentioned in cluster.yaml

secrets:  
ssl: my-testdb-psmdb-mongo  
sslInternal: my-testdb-psmdb-mongo

Error:  
in cfg-

> QUERY [js] uncaught exception: TypeError: db.isMaster(…).$configServerState is undefined :  
> @(shell eval):1:1
> 
> - 
> 
> ```
> [main] exiting with code -4
> 
> ```
> 
> - exit\_status=0  
> Exit: connect to PBM: create mongo connection: create mongo client: tls: private key does not match public key

1. What should be certificate format included in secret?
2. Is there any extended cert configuration so that we can add our own cluster issuer like venafi

---

<div class="post-metadata">

**Author:** ![karthik\_nathan](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/karthik_nathan/32/8805_2.png) [@karthik\_nathan](https://forums.percona.com/u/karthik_nathan)\
**Post date:** [January 12, 2023, 6:55am UTC](https://forums.percona.com/t/configuring-tls-for-percona-mongodb-sharding-setup/19281/2 "2023-01-12T06:55:39Z")

</div>

Any updates on this?