lucene-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF subversion and git services (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (SOLR-7449) solr/server/etc/jetty-https-ssl.xml hard codes the key store file and password rather than pulling them from the sysprops defined in solr/bin/solr.in.{sh,bat}
Date Sun, 26 Apr 2015 15:22:40 GMT

    [ https://issues.apache.org/jira/browse/SOLR-7449?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14513084#comment-14513084
] 

ASF subversion and git services commented on SOLR-7449:
-------------------------------------------------------

Commit 1676114 from shalin@apache.org in branch 'dev/branches/branch_5x'
[ https://svn.apache.org/r1676114 ]

SOLR-4839: Upgrade Jetty to 9.2.10.v20150310 and restlet-jee to 2.3.0. Also fixes SOLR-7449.
Merges commits r1649552,1649571,1649584,1649689,1650169,1657495,1675261,1675337,1675619,1676102,1676113
from trunk.

> solr/server/etc/jetty-https-ssl.xml hard codes the key store file and password rather
than pulling them from the sysprops defined in solr/bin/solr.in.{sh,bat}
> --------------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: SOLR-7449
>                 URL: https://issues.apache.org/jira/browse/SOLR-7449
>             Project: Solr
>          Issue Type: Bug
>    Affects Versions: 5.1
>            Reporter: Steve Rowe
>
> [~shalinmangar] pointed out this issue out to me.  
> The hard-coded values in {{jetty-https-ssl.xml}} are the same as the ones in the tutorial,
so people creating the keystore as described in the tutorial are able to run Solr in SSL mode.
> Also {{jetty-https-ssl.xml}} doesn't configure a trust store (or a password for it),
so there's no way currently to have a different trust store from the key store.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


Mime
View raw message