[
https://issues.apache.org/jira/browse/SOLR-18055?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
David Smiley updated SOLR-18055:
--------------------------------
Labels: newdev (was: )
This issue would include updating the ref guide to indicate that setting the
urlScheme cluster property is only useful for CloudSolrClient users that don't
set the {{solr.ssl.enabled}} sys prop. I'll create another linked issue for
CloudSolrClient created with URLs to use the scheme of those URLs; that will
further improve the matter. A note on the upgrade section is warranted as well.
SolrCloud testing: should be done to validate the claim I make that a urlScheme
cluster property isn't needed anymore. Various tests should then stop setting
that cluster property (I presume they do now but didn't check).
SolrTestCaseJ4 should no longer set "urlScheme" but it should set
"solr.ssl.enabled" sys prop boolean instead.
We should remove the urlScheme from all our solr.xml files. The need to set it
explicitly will become niche.
> Use SOLR_SSL_ENABLED to auto-set urlScheme appropriately
> --------------------------------------------------------
>
> Key: SOLR-18055
> URL: https://issues.apache.org/jira/browse/SOLR-18055
> Project: Solr
> Issue Type: Improvement
> Components: security
> Reporter: David Smiley
> Priority: Major
> Labels: newdev
>
> A user uses SOLR_SSL_ENABLED to enable https / SSL. It ought to be enough
> but today it isn't. For standalone mode, the solr.xml
> httpShardHandlerFactory has a urlScheme to manually set. I propose it need
> not; that component can examine solr.ssl.enabled prop to choose between http
> and https as a default. For SolrCloud, ZkStateReader.getBaseUrlForNodeName
> can do similarly, as the default if the urlScheme cluster property isn't set.
> CloudSolrClient can do the same if someone sets the system property. Thus a
> SolrCloud user need not feel compelled to set the urlScheme in a cluster
> property, which is an annoying step. That might eventually be deprecated.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
