[
https://issues.apache.org/jira/browse/SOLR-5868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13943166#comment-13943166
]
Shawn Heisey commented on SOLR-5868:
------------------------------------
If a system property is the only reasonable way to get the config there, then I
think that would be OK. If a solrconfig.xml option is doable without a ton of
work, I think one should be available.
> HttpClient should be configured to use ALLOW_ALL_HOSTNAME hostname verifier
> to simplify SSL setup
> -------------------------------------------------------------------------------------------------
>
> Key: SOLR-5868
> URL: https://issues.apache.org/jira/browse/SOLR-5868
> Project: Solr
> Issue Type: Improvement
> Affects Versions: 4.7
> Reporter: Steve Davids
> Assignee: Mark Miller
> Fix For: 4.8, 5.0, 4.7.1
>
> Attachments: SOLR-5868.patch, SOLR-5868.patch
>
>
> The default HttpClient hostname verifier is the
> BROWSER_COMPATIBLE_HOSTNAME_VERIFIER which verifies the hostname that is
> being connected to matches the hostname presented within the certificate.
> This is meant to protect clients that are making external requests out across
> the internet, but requests within the the SOLR cluster should be trusted and
> can be relaxed to simplify the SSL/certificate setup process.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
