[SOLR-16616] JWTAuthPlugin: Read trusted X509 certificates from multiple files

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 9.2
• Component/s: Authentication
• Assignee: Jan Høydahl
• Reporter: Jan Høydahl
• Created: 10/Jan/23 19:09
• Updated: 27/Mar/23 18:04
• Resolved: 13/Jan/23 13:21

Description

The JWTAuthPlugin supports overriding Java's built-in trustStore for validating SSL certificate of the Identity Provider. Currently we allow user to either specify a path to one file, e.g. foo.pem, or to supply the ascii text of the certificate as a string.

In certain environments, the plugin may need to trust certificates spread across multiple files. This Jira is to implement such support.

Issue Links

• links to: GitHub Pull Request #1284