[SOLR-15999] Update SSL documentation for mutual TLS (mTLS)

• Type: Task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: documentation
• Assignee: Unassigned
• Reporter: Jan Høydahl
• Created: 09/Feb/22 11:43
• Updated: 12/May/22 00:35

Description

Current SSL docs at https://solr.apache.org/guide/8_11/enabling-ssl.html does not really describe the mTLS scenario at all.

There shuld be a separate section or perhaps a sub page for mTLS, which needs to document the existence of the client keystore / truststore and associated parameters (from solr.in.sh):

# Uncomment if you want to override previously defined SSL values for HTTP client
# otherwise keep them commented and the above values will automatically be set for HTTP clients
#SOLR_SSL_CLIENT_KEY_STORE=
#SOLR_SSL_CLIENT_KEY_STORE_PASSWORD=
#SOLR_SSL_CLIENT_TRUST_STORE=
#SOLR_SSL_CLIENT_TRUST_STORE_PASSWORD=
#SOLR_SSL_CLIENT_KEY_STORE_TYPE=
#SOLR_SSL_CLIENT_TRUST_STORE_TYPE= 

Issue Links

• relates to: SOLR-14106 SSL with SOLR_SSL_NEED_CLIENT_AUTH not working since v8.2.0