epugh commented on PR #5107: URL: https://github.com/apache/solr/pull/5107#issuecomment-6638197562
I had a long chat with @gerlowski and I wanted to capture some notes: - Much easier to have a bin/solr start -e secure that does everything, but doestn' provide extra tooling around certs and sll that users can use. (i.e, don't expose the current `bin/solr ssl` tooling, jsut hide it. - Onboard with using bouncycastle for all java instead of openssl - a vote for either `.yaml` or `.toml` over our current `solr.in.sh` and `solr.in.cmd` files! - requiring `solr.in.sh` is fine for bin/solr commands that aren't about starting/sotpping solr.. that are potentialyly client side. - i think he is onboard with creating a basic security.json pattern??? - "most teams have SREs that do all the ssl stuff" ;-). Sigh. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
