[SOLR-9304] SOLR_SSL_CHECK_PEER_NAME=false (aka -Dsolr.ssl.checkPeerName=false) has no effect

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 7.0
• Fix Version/s: 7.4
• Assignee: Chris M. Hostetter
• Reporter: Chris M. Hostetter
• Created: 13/Jul/16 19:15
• Updated: 08/Jun/19 15:38
• Resolved: 22/Apr/18 22:02

Description

-Dsolr.ssl.checkPeerName=false is completely ignored on master...

hossman@tray:~/lucene/dev/solr [master] $ find -name \*.java | xargs grep checkPeerName
./solrj/src/java/org/apache/solr/client/solrj/impl/HttpClientUtil.java:  public static final String SYS_PROP_CHECK_PEER_NAME = "solr.ssl.checkPeerName";
hossman@tray:~/lucene/dev/solr [master] $ find -name \*.java | xargs grep SYS_PROP_CHECK_PEER_NAME
./test-framework/src/java/org/apache/solr/util/SSLTestConfig.java:      boolean sslCheckPeerName = toBooleanDefaultIfNull(toBooleanObject(System.getProperty(HttpClientUtil.SYS_PROP_CHECK_PEER_NAME)), true);
./solrj/src/java/org/apache/solr/client/solrj/impl/HttpClientUtil.java:  public static final String SYS_PROP_CHECK_PEER_NAME = "solr.ssl.checkPeerName";

Issue Links

• is broken by: SOLR-4509 Move to non deprecated HttpClient impl classes to remove stale connection check on every request and move connection lifecycle management towards the client.