[
https://issues.apache.org/jira/browse/SOLR-18055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18079617#comment-18079617
]
ASF subversion and git services commented on SOLR-18055:
--------------------------------------------------------
Commit bdc4e277d8466f24fd9123c2956d05634c72b5e3 in solr's branch
refs/heads/main from Vishnu Priya
[ https://gitbox.apache.org/repos/asf?p=solr.git;h=bdc4e277d84 ]
SOLR-18055: Improve SSL/HTTPS URL scheme detection (#4272)
Prioritize the solr.ssl.enabled system property for determining the URL scheme
used in inter-node communication. CloudSolrClient was recently also improved
similarly.
This makes SSL configuration more straightforward for users, although the
urlScheme cluster property is still supported and so is the urlScheme config
field of HttpShardHandlerFactory in solr.xml. Those might become deprecated if
they don't have a purpose.
Co-authored-by: David Smiley <[email protected]>
> Use SOLR_SSL_ENABLED to auto-set urlScheme appropriately
> --------------------------------------------------------
>
> Key: SOLR-18055
> URL: https://issues.apache.org/jira/browse/SOLR-18055
> Project: Solr
> Issue Type: Improvement
> Components: security
> Reporter: David Smiley
> Priority: Major
> Labels: newdev, pull-request-available
> Time Spent: 4h 20m
> Remaining Estimate: 0h
>
> A user uses SOLR_SSL_ENABLED to enable https / SSL. It ought to be enough
> but today it isn't. For standalone mode, the solr.xml
> httpShardHandlerFactory has a urlScheme to manually set. I propose it need
> not; that component can examine solr.ssl.enabled prop to choose between http
> and https as a default. For SolrCloud, ZkStateReader.getBaseUrlForNodeName
> can do similarly, as the default if the urlScheme cluster property isn't set.
> CloudSolrClient can do the same if someone sets the system property. Thus a
> SolrCloud user need not feel compelled to set the urlScheme in a cluster
> property, which is an annoying step. That might eventually be deprecated.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
