:man_page: mongoc_client_encryption_opts_set_tls_opts

mongoc_client_encryption_opts_set_tls_opts()
============================================

Synopsis
--------

.. code-block:: c

   void
   mongoc_client_encryption_opts_set_tls_opts (
      mongoc_client_encryption_opts_t *opts, const bson_t *tls_opts);


Parameters
----------

* ``opts``: The :symbol:`mongoc_client_encryption_opts_t`
* ``tls_opts``: A :symbol:`bson_t` mapping a Key Management Service (KMS) provider name to a BSON document with TLS options.

``tls_opts`` is a BSON document of the following form:

.. code-block:: javascript

   <KMS provider name>: {
      tlsCaFile: Optional<String>
      tlsCertificateKeyFile: Optional<String>
      tlsCertificateKeyFilePassword: Optional<String>
   }

The KMS providers ``aws``, ``azure``, ``gcp``, and ``kmip`` are supported as keys in the ``tls_opts`` document.

``tls_opts`` maps the KMS provider name to a BSON document for TLS options.

The BSON document for TLS options may contain the following keys:

- ``MONGOC_URI_TLSCERTIFICATEKEYFILE``
- ``MONGOC_URI_TLSCERTIFICATEKEYFILEPASSWORD``
- ``MONGOC_URI_TLSCAFILE``

.. literalinclude:: ../examples/client-side-encryption-doc-snippets.c
   :caption: Example use
   :start-after: BEGIN:mongoc_client_encryption_opts_set_tls_opts
   :end-before: END:mongoc_client_encryption_opts_set_tls_opts
   :dedent: 6

See :doc:`configuring_tls` for a description of the behavior of these options.

.. seealso::

  | The guide for :doc:`Using Client-Side Field Level Encryption <using_client_side_encryption>`

