[jira] [Commented] (SOLR-5868) HttpClient should be configured to use ALLOW_ALL_HOSTNAME hostname verifier to simplify SSL setup

["ASF subversion and git services (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SOLR-5868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14099222#comment-14099222 ] 

ASF subversion and git services commented on SOLR-5868:
-------------------------------------------------------

Commit 1618285 from hossman@apache.org in branch 'dev/trunk'
[ https://svn.apache.org/r1618285 ]

SOLR-5868: fixing botched changes.txt placement/merge from 4.9

> HttpClient should be configured to use ALLOW_ALL_HOSTNAME hostname verifier to simplify SSL setup
> -------------------------------------------------------------------------------------------------
>
>                 Key: SOLR-5868
>                 URL: https://issues.apache.org/jira/browse/SOLR-5868
>             Project: Solr
>          Issue Type: Improvement
>    Affects Versions: 4.7
>            Reporter: Steve Davids
>            Assignee: Mark Miller
>             Fix For: 4.9, 5.0
>
>         Attachments: SOLR-5868.patch, SOLR-5868.patch
>
>
> The default HttpClient hostname verifier is the BROWSER_COMPATIBLE_HOSTNAME_VERIFIER which verifies the hostname that is being connected to matches the hostname presented within the certificate. This is meant to protect clients that are making external requests out across the internet, but requests within the the SOLR cluster should be trusted and can be relaxed to simplify the SSL/certificate setup process.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org