Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
Description
On the "Enabling SSL" page: https://lucene.apache.org/solr/guide/8_3/enabling-ssl.html#enabling-ssl
The first step is currently to create a JKS keystore. The next step immediately converts the JKS keystore into PKCS12, so that openssl can then be used to extract key material in PEM format for use with curl.
Now that PKCS12 is java's default keystore format, why not omit step 1 entirely? What am I missing? PKCS12 is a more commonly understood/standardized format.