[
https://issues.apache.org/jira/browse/SOLR-18055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18080210#comment-18080210
]
ASF subversion and git services commented on SOLR-18055:
--------------------------------------------------------
Commit 6434c2b4c075c36b5bc4054d9bdefad7c5338aad in solr's branch
refs/heads/branch_10x from Vishnu Priya
[ https://gitbox.apache.org/repos/asf?p=solr.git;h=6434c2b4c07 ]
SOLR-18055: Improve SSL/HTTPS URL scheme detection (#4272)
Prioritize the solr.ssl.enabled system property for determining the URL scheme
used in inter-node communication. CloudSolrClient was recently also improved
similarly.
This makes SSL configuration more straightforward for users, although the
urlScheme cluster property is still supported and so is the urlScheme config
field of HttpShardHandlerFactory in solr.xml. Those might become deprecated if
they don't have a purpose.
Co-authored-by: David Smiley <[email protected]>
> Use SOLR_SSL_ENABLED to auto-set urlScheme appropriately
> --------------------------------------------------------
>
> Key: SOLR-18055
> URL: https://issues.apache.org/jira/browse/SOLR-18055
> Project: Solr
> Issue Type: Improvement
> Components: security
> Reporter: David Smiley
> Priority: Major
> Labels: newdev, pull-request-available
> Time Spent: 4h 20m
> Remaining Estimate: 0h
>
> A user uses SOLR_SSL_ENABLED to enable https / SSL. It ought to be enough
> but today it isn't. For standalone mode, the solr.xml
> httpShardHandlerFactory has a urlScheme to manually set. I propose it need
> not; that component can examine solr.ssl.enabled prop to choose between http
> and https as a default. For SolrCloud, ZkStateReader.getBaseUrlForNodeName
> can do similarly, as the default if the urlScheme cluster property isn't set.
> CloudSolrClient can do the same if someone sets the system property. Thus a
> SolrCloud user need not feel compelled to set the urlScheme in a cluster
> property, which is an annoying step. That might eventually be deprecated.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
