[SOLR-8897] SSL-related passwords in solr.in.sh are in plain text

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Component/s: scripts and tools, security
• Assignee: Unassigned
• Reporter: Esther Quansah
• Created: 24/Mar/16 16:31
• Updated: 26/Jun/18 14:54
• Resolved: 14/Jul/17 12:17

Description

As per the steps mentioned at following URL, one needs to store the plain text password for the keystore to configure SSL for Solr, which is not a good idea from security perspective.
URL: https://cwiki.apache.org/confluence/display/solr/Enabling+SSL#EnablingSSL-SetcommonSSLrelatedsystemproperties (https://cwiki.apache.org/confluence/display/solr/Enabling+SSL#EnablingSSL-SetcommonSSLrelatedsystemproperties)
Is there any way so that the encrypted password can be stored (instead of plain password) in solr.in.cmd/solr.in.sh to configure SSL?

Issue Links

• duplicates: SOLR-10307 Provide SSL/TLS keystore password a more secure way