Sridhar created SOLR-16170:
------------------------------

             Summary: SSL configuration not working in AWS linux ec2 server 
even after following the steps mentioned by documentation from solr
                 Key: SOLR-16170
                 URL: https://issues.apache.org/jira/browse/SOLR-16170
             Project: Solr
          Issue Type: Test
      Security Level: Public (Default Security Level. Issues are Public)
          Components: security
    Affects Versions: 8.11.1
            Reporter: Sridhar


Hi,

 

I am using solr version 8.11.1 installed in aws linux ec2. I tried the SSL 
configuration as per the steps mentioned in solr documentation for the same 
version. But it was not working in https. Still it works in http only. The 
following are the details,

The installation directory is 

/opt/solr

the ssl file is created using keytool command and converted to pem format which 
is placed in the directory

/opt/solr/server/etc

the solr.in.sh file is placed in the directory

/opt/solr/bin

 

and the content in the solr.in.sh file is as follows

SOLR_SSL_ENABLED=true
 # Uncomment to set SSL-related system properties
 # Be sure to update the paths to the correct keystore for your environment
SOLR_SSL_KEY_STORE=etc/cert.pem
SOLR_SSL_KEY_STORE_PASSWORD=keysecret

SOLR_SSL_TRUST_STORE=etc/cert.pem
SOLR_SSL_TRUST_STORE_PASSWORD=keysecret
 # Require clients to authenticate
SOLR_SSL_NEED_CLIENT_AUTH=false
 # Enable clients to authenticate (but not require)
SOLR_SSL_WANT_CLIENT_AUTH=false
 # SSL Certificates contain host/ip "peer name" information that is validated 
by default. Setting
 # this to false can be useful to disable these checks when re-using a 
certificate on many hosts
SOLR_SSL_CHECK_PEER_NAME=true

With the above information, pls advise why ssl is not working for me.
Thanks,
Sree
 



--
This message was sent by Atlassian Jira
(v8.20.7#820007)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org

Reply via email to