Uploaded image for project: 'Solr'
  1. Solr
  2. SOLR-14141

eliminate JKS keystore from solr SSL docs

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 8.5
    • None
    • None

    Description

      On the "Enabling SSL" page: https://lucene.apache.org/solr/guide/8_3/enabling-ssl.html#enabling-ssl

      The first step is currently to create a JKS keystore. The next step immediately converts the JKS keystore into PKCS12, so that openssl can then be used to extract key material in PEM format for use with curl.

      Now that PKCS12 is java's default keystore format, why not omit step 1 entirely? What am I missing? PKCS12 is a more commonly understood/standardized format.

      Attachments

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            rcmuir Robert Muir
            rcmuir Robert Muir
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment