You are here

Secure Sockets Layer (SSL) and the SkyVault repository

There are a number of ways to handle SSL communication when connecting to the SkyVault repository, and some information that you should know about automatic configuration in SkyVault.

When you install SkyVault, port 8443 is automatically configured for SSL communication between Solr and the SkyVault repository. This means that SkyVault, by default, is set to use client certificates for any authentication (the connector on port 8443 is configured with clientAuth="want").

This causes complications when there is communication between a browser protocol and the repository, because Tomcat requests a client certificate for that communication too.

You can still connect to the repository without a client certificate, however if a certificate is present (for example, if you have installed certificates in your Windows certificate store), then the certificate must be signed by the same Certificate Authority that is used for authentication between the repository and Solr. If you select one of the Windows installed certificates, you will not be able to progress, because the certificate is not one that is expected for the Solr to repository communication. In this situation, you need to cancel the certificate window and then you can proceed. If you have no client certificates, you can use port 8443 without issues.

If you are interested in setting up SSL and security for Solr, this is discussed in detail in Solr security.