lucene-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Davids (JIRA)" <>
Subject [jira] [Commented] (SOLR-5757) Need ref-guide coverage of using Solr(Cloud) with SSL
Date Fri, 18 Apr 2014 01:29:16 GMT


Steve Davids commented on SOLR-5757:

Just to get some initial notes on the record:

* See the example jetty.xml file to see how to configure Jetty w/ SSL in the SslSelectChannelConnector
** Set needClientAuth to true to enable two-way SSL, can be configured in the example via
* Set the URL Scheme in ZooKeeper to let the cluster know that it needs to use https when
building the various replica URLs
** ZK Command: {code}./ -zkhost localhost:9983 -cmd put /clusterprops.json
** Note: possible improvement is to provide some bootstrapping mechanism?
* Set the* system properties to configure SSL for HttpClient, this will also
allow two-way SSL to work...
* Clients can use a generic certificate and use the ALLOW_ALL_HOSTNAME_VERIFIER (SOLR-5868)
by setting the solr.ssl.checkPeerName system property (-Dsolr.ssl.checkPeerName=true). This
makes it so clients don't need to specify *every* machine in the cluster in the alt subject
names within the certificate (as it may change and be a pain to manage).

> Need ref-guide coverage of using Solr(Cloud) with SSL
> -----------------------------------------------------
>                 Key: SOLR-5757
>                 URL:
>             Project: Solr
>          Issue Type: Task
>          Components: documentation
>            Reporter: Hoss Man
>            Assignee: Mark Miller
>             Fix For: 4.9, 5.0
> need doc updates explaining:
> * basics of running SolrCloud with SSL
> * how to setup/config client auth certs for bi-directional auth

This message was sent by Atlassian JIRA

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message