TLS Handshake Error Connecting Server 2021.4 to User Managed Mongo with SSL

Question

I have been receiving the following error when trying to start the Alteryx server with an advanced connection string:

Mongo error: ""No suitable servers found: ''serverSelectionTimoutMS' expired" [TLS handshake failed]: generic server error"" code: <mongodb:13053>

Facts -

* I can connect when I use a basic config file for Mongo and a connection string without ?ssl=True and Alteryx Server runs as expected
* Server version: 2021.4 on Windows 2019 server not FIPS enabled
* MongoDB version: 4.4 on RHEL 7 in FIPS enable mode
* Net config in Mongo (without the bullet points)* tls:* mode: requireTLS
* certificateKeyFile: pem file
* certificateKeyFilePassword: pass
* CAFile: CA pem
* FIPSMode: true

What I've tried -

* All combinations I could think of for the mongo config, including using the deprecated SSL net keywords
* adjusting the certificate file to sometimes include the private key, sometimes not
* currently attempting to locate a version of the mongo certificate on the windows server, but that doesn't appear to work either
* I've read and followed the below articles* How to Create a User-Managed MongoDB Instance - Alteryx Community
* How to Install SSL for User Managed Mongo 4.0 - Alteryx Community
* Integration Issue with MongoDB Atlas - Alteryx Community

* I think the error has to be something with either the certificate, cypher suite, or protocol mismatch between the two entities

Let me know if there is anything else I can provide or any recommendations, thank you!!

smithct4mn · Answer

Turns out this ultimately had to do with the certificates and config file.  I will potentially be writing a post about this in case anyone has my weirdly specific use case.  Thank you for the reply!

AsmiDesai · Answer

Hello @smithct4mn

Check for Mongod locks and remove them before trying to connect to MongoDB.
Make sure to perform indexing post removal of locks.