Unable to access Galaxy mongodb via mongodump CLI (TLS error)

deployment Galaxy
1

Trying to connect to mongodb from external, using mongodump, results in this error (formatted for readability):

~ ❯ mongodump --uri="mongodb://USERNAME_REDACTED:PASSWORD_REDACTED@galaxyadmin_galaxyfreedb-01.mongodb.galaxy-cloud.io:30025,galaxyadmin_galaxyfreedb-02.mongodb.galaxy-cloud.io:30025,galaxyadmin_galaxyfreedb-03.mongodb.galaxy-cloud.io:30025/myapp-meteorapp-com?replicaSet=galaxyadmin_galaxyfreedb&ssl=true" --archive=db.gz --gzip
2026-05-24T12:46:48.376-0700	Failed: can't create session: failed to connect to mongodb://USERNAME_REDACTED:PASSWORD_REDACTED@galaxyadmin_galaxyfreedb-01.mongodb.galaxy-cloud.io:30025,galaxyadmin_galaxyfreedb-02.mongodb.galaxy-cloud.io:30025,galaxyadmin_galaxyfreedb-03.mongodb.galaxy-cloud.io:30025/myapp-meteorapp-com?replicaSet=galaxyadmin_galaxyfreedb&ssl=true:
  server selection error: context deadline exceeded, current topology:
    { Type: ReplicaSetNoPrimary, Servers: [
      { 
        Addr: galaxyadmin_galaxyfreedb-01.mongodb.galaxy-cloud.io:30025, 
        Type: Unknown, 
        Last error: tls: failed to verify certificate: x509: “*.mongodb.galaxy-cloud.io” certificate is not standards compliant
      },
      {
        Addr: galaxyadmin_galaxyfreedb-02.mongodb.galaxy-cloud.io:30025,
        Type: Unknown,
        Last error: tls: failed to verify certificate: x509: “*.mongodb.galaxy-cloud.io” certificate is not standards compliant
      },
      {
        Addr: galaxyadmin_galaxyfreedb-03.mongodb.galaxy-cloud.io:30025,
        Type: Unknown,
        Last error: tls: failed to verify certificate: x509: “*.mongodb.galaxy-cloud.io” certificate is not standards compliant
      },
    ] }

Is the DB internal only? If so, I’m thinking a workaround is to install mongodump in the Meteor app, and write an HTTP endpoint (that blocks for non-admin users) to download the dump.

EDIT: Yep, I was able to create a WebApp.handlers.use('/db-dump') HTTP endpoint and a client-side function to download the DB from that endpoint using Meteor.fetch('/db-dump', {auth: true}) from Meteor 3.5 (so that the endpoint can easily deny if not logged in as an admin).

2

Depending on the MongoDB client / 3T / Mongo Compass you’re using, you may need to append ssl=true&tlsInsecure=true to the end of your connection string. Give that a try and let me know if it works for you.

Best regards,

1 Like