'Is it possible to use Solr with SSL and CA-Signed Certs

I'd like to use SSL with my Solr instance (in the cloud). The instructions here speak only to using a self-signed cert https://cwiki.apache.org/confluence/display/solr/Enabling+SSL#EnablingSSL-CreateaSolrCloudcollectionusingbin/solr

But I'd rather not distribute around a keystore/truststore to each Solr node and my clients too.

Is there a way I can use CA-signed certs with Solr?

Solution 1:^[1]

Convert your CA cert into .PFX and place it in etc folder and update config as below -

set SOLR_SSL_KEY_STORE=etc/<certfilename>.pfx
set SOLR_SSL_KEY_STORE_TYPE=PKCS12

Solution 2:^[2]

The Java truststore and keystore files are the same regardless if its self-signed or CA-signed certificates.

Using the instructions from your CA, import the appropriate certificates to the truststore and keystore that Solr will use, and then configure your Solr to point to your new truststore/keystore files (and required passwords to access the certificates).

In other words, follow the instructions you linked, just skip the first step (Generate a self-signed certificate and a key), the rest of the instructions are still valid, even with your CA-signed certificates.

Solution 3:^[3]

I went through this great blog on this

https://getfishtank.ca/blog/updating-ssl-certificates-in-solr

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution	Source
Solution 1	Surya Narayan
Solution 2	Joakim Erdfelt
Solution 3	Amin Sayed

'Is it possible to use Solr with SSL and CA-Signed Certs

Solution 1:[1]

Solution 2:[2]

Solution 3:[3]

Sources

Related Questions

Solution 1:^[1]

Solution 2:^[2]

Solution 3:^[3]