[
https://issues.apache.org/jira/browse/SOLR-16743?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17945727#comment-17945727
]
ASF subversion and git services commented on SOLR-16743:
--------------------------------------------------------
Commit 2dbc0d21177fbcd3c7d51261b8077a5f9811502e in solr's branch
refs/heads/add-pki-caching from Jason Gerlowski
[ https://gitbox.apache.org/repos/asf?p=solr.git;h=2dbc0d21177 ]
Replace 'raw' client usage in PKIAuthPlugin (#107)
Using a Http2SolrClient ensures that the PKI logic can take advantage of
the certificate-refresh logic that Http2SolrClient et al have supported
since SOLR-16743.
(This commit anticipates some changes that the upstream community is
currently working on, but that haven't yet landed in their final form on
branch_9x. At time of writing, it looks exceedingly likely that these
changes will be available in Solr 9.8, and so this commit will not need
brought forward to any release branches other than 9.7. This assumption
can be validated by checking the latest status of SOLR-16503 where this
upstream work is happening.)
Co-authored-by: Jason Gerlowski <gerlowsk...@apache.org>
> Auto reload keystore/truststore on change
> -----------------------------------------
>
> Key: SOLR-16743
> URL: https://issues.apache.org/jira/browse/SOLR-16743
> Project: Solr
> Issue Type: Improvement
> Components: Server, SolrJ
> Reporter: Houston Putman
> Assignee: Tomas Eduardo Fernandez Lobbe
> Priority: Major
> Fix For: main (10.0), 9.5
>
> Time Spent: 1h
> Remaining Estimate: 0h
>
> Currently everyone who uses Solr with SSL must restart their clusters when
> new certificates are created.
> Jetty comes with an
> [ssl-reload|https://www.eclipse.org/jetty/documentation/jetty-10/operations-guide/index.html#og-module-ssl-reload]
> module for reloading the server's keystore.
> For the client we would likely need to reload the truststore, but that
> requires more investigation.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org
