[SOLR-14163] SOLR_SSL_CLIENT_HOSTNAME_VERIFICATION needs to work with Jetty server/client SSL contexts

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 8.4
• Fix Version/s: 8.4.1, 8.5
• Component/s: Server
• Assignee: Kevin Risden
• Reporter: Kevin Risden
• Created: 03/Jan/20 20:06
• Updated: 07/Sep/23 16:26
• Resolved: 09/Jan/20 15:48

Description

SOLR-14106 ensured that Jetty ssl context used client and server correctly. This however requires that SOLR_SSL_CLIENT_HOSTNAME_VERIFICATION be handled slightly differently to ensure that only clients are affected.

Issue Links

• causes: SOLR-16963 verifyClientHostName is used incorrectly
• is caused by: SOLR-14106 SSL with SOLR_SSL_NEED_CLIENT_AUTH not working since v8.2.0
• is related to: SOLR-16679 Fix solr.jetty.ssl.verifyClientHostName logging
• relates to: SOLR-13798 SSL: Adding Enabling/Disabling client's hostname verification config
• links to: GitHub Pull Request #1147