Uploaded image for project: 'Solr'
  1. Solr
  2. SOLR-13798

SSL: Adding Enabling/Disabling client's hostname verification config

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 8.2
    • Fix Version/s: 8.3
    • Component/s: None
    • Labels:
      None

      Description

      The problem for this after upgrading to Jetty 9.4.19 (SOLR-13541). endpointIdentificationAlgorithm changed from null → HTTPS. As a result of this client's hostname (identity) is always get verified on connecting Solr.

      This change improved the security level of Solr, since it requires 2 ways identity verifications (client verify server's identity and vice versa). It leads to a problem when only certificate verification is enough (client's hostname is not known ahead) for users.

      We should introduce a flag in solr.in.sh to disable client's hostname verification when needed then.

      More about this at :

        Attachments

        1. SOLR-13709.patch
          3 kB
          Cao Manh Dat
        2. SOLR-13709.patch
          5 kB
          Cao Manh Dat

          Issue Links

            Activity

              People

              • Assignee:
                caomanhdat Cao Manh Dat
                Reporter:
                caomanhdat Cao Manh Dat
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: