Jens Deppe created GEODE-1294:
---------------------------------

             Summary: Overriding cluster-ssl properties does not work for 
http-service-ssl
                 Key: GEODE-1294
                 URL: https://issues.apache.org/jira/browse/GEODE-1294
             Project: Geode
          Issue Type: Bug
          Components: security
            Reporter: Jens Deppe


when {{cluster-ssl-require-authentication=true}} the following properties are 
set:
{noformat}
cluster-ssl-require-authentication=true
gateway-ssl-require-authentication=true
http-service-ssl-require-authentication=true
jmx-manager-ssl-require-authentication=true
server-ssl-require-authentication=true
{noformat}

When that property is not set (i.e. just defaulted) and 
{{cluster-ssl-enabled=true}} then only 
{{http-service-ssl-require-authentication=false}} is set and all the other 
{{require-authentication}} properties are {{true}}. With these settings, we 
require mutual auth for all connections except Pulse and gfsh over http.

However, if I set the following which should really be mimicking the default 
settings for {{cluster-ssl-enabled=true}}:
{noformat}
cluster-ssl-require-authentication=true
http-service-ssl-require-authentication=false
{noformat}

Then I am unable to access Pulse as it still appears to require mutual auth.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to