Uploaded image for project: 'Solr'
  1. Solr
  2. SOLR-16170

SSL configuration not working in AWS linux ec2 server even after following the steps mentioned by documentation from solr

    XMLWordPrintableJSON

Details

    • Test
    • Status: Resolved
    • Major
    • Resolution: Invalid
    • 8.11.1
    • None
    • security

    Description

      Hi,

       

      I am using solr version 8.11.1 installed in aws linux ec2. I tried the SSL configuration as per the steps mentioned in solr documentation for the same version. But it was not working in https. Still it works in http only. The following are the details,

      The installation directory is 

      /opt/solr

      the ssl file is created using keytool command and converted to pem format which is placed in the directory

      /opt/solr/server/etc

      the solr.in.sh file is placed in the directory

      /opt/solr/bin

       

      and the content in the solr.in.sh file is as follows

      SOLR_SSL_ENABLED=true

      1. Uncomment to set SSL-related system properties
      2. Be sure to update the paths to the correct keystore for your environment
        SOLR_SSL_KEY_STORE=etc/cert.pem
        SOLR_SSL_KEY_STORE_PASSWORD=keysecret

      SOLR_SSL_TRUST_STORE=etc/cert.pem
      SOLR_SSL_TRUST_STORE_PASSWORD=keysecret

      1. Require clients to authenticate
        SOLR_SSL_NEED_CLIENT_AUTH=false
      2. Enable clients to authenticate (but not require)
        SOLR_SSL_WANT_CLIENT_AUTH=false
      3. SSL Certificates contain host/ip "peer name" information that is validated by default. Setting
      4. this to false can be useful to disable these checks when re-using a certificate on many hosts
        SOLR_SSL_CHECK_PEER_NAME=true

      With the above information, pls advise why ssl is not working for me.
      Thanks,
      Sree
       

      Attachments

        Activity

          People

            Unassigned Unassigned
            sreedaar Sridhar
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: