[SOLR-10307] Provide SSL/TLS keystore password a more secure way

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 6.7, 7.0
• Component/s: security
• Assignee: Mark Miller
• Reporter: Mano Kovacs
• Created: 16/Mar/17 11:37
• Updated: 21/Nov/19 00:42
• Resolved: 27/Jun/17 06:38

Description

Currently the only way to pass server and client side SSL keytstore and truststore passwords is to set specific environment variables that will be passed as system properties, through command line parameter.

First option is to pass passwords through environment variables which gives a better level of protection. Second option would be to use hadoop credential provider interface to access credential store.

Issue Links

• is duplicated by: SOLR-8897 SSL-related passwords in solr.in.sh are in plain text
• relates to: SOLR-10783 Using Hadoop Credential Provider as SSL/TLS store password source