[SOLR-14440] Provide Certificate Authentication Plugin

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 9.0
• Component/s: security
• Assignee: Mike Drob
• Reporter: Mike Drob
• Created: 27/Apr/20 22:19
• Updated: 12/May/22 00:26
• Resolved: 01/May/20 17:47

Description

As described in this comment on SOLR-4407, while we support Client SSL certificates we do not have a way to use them with authentication and authorization in an end-to-end fashion.

Specifically, we don't have an easy (or any?) way to load the certificate subject via a user principal into the AuthorizationContext.

The work in SOLR-10814 would also be good here, since the subject can have much more than just the CN, for example it can have locations and organizational units. C=US, ST=California, L=San Francisco, O=Wikimedia Foundation, Inc., CN=*.wikipedia.org

Issue Links

• links to: GitHub Pull Request #1463