Access Datafari only by https

[Christof Gonçalves]

Hello everybody,

I want to put the application Datafari to get access only in https. So, what I want, is to configure an SSL certificate with Datafari.

I have configure tomcat with SSL/TLS and I can access Datafari with https, but the SOLR seems not working :/
So, I read some forums about SOLR, and I must also configure SOLR with SSL.

I created the SSL certificate "solr-ssl.keystore.jks", "solr-ssl.keystore.p12", "solr-ssl.pem" and put the following lines in solr.in.sh:
 
SOLR_SSL_KEY_STORE=${DATAFARI_HOME}/solr/bin/solr-ssl.keystore.jks
SOLR_SSL_KEY_STORE_PASSWORD=secret
SOLR_SSL_TRUST_STORE=${DATAFARI_HOME}/solr/bin/solr-ssl.keystore.jks
SOLR_SSL_TRUST_STORE_PASSWORD=secret
# Require clients to authenticate
SOLR_SSL_NEED_CLIENT_AUTH=false
# Enable clients to authenticate (but not require)
SOLR_SSL_WANT_CLIENT_AUTH=false
# Define Key Store type if necessary
SOLR_SSL_KEY_STORE_TYPE=JKS
SOLR_SSL_TRUST_STORE_TYPE=JKS

I restarted Datafari, but the SOLR seems also not working :(

Can anybody help me, how I can configure SSL with Datafari, please ?

Best Regards,

[cedric...@francelabs.com]

Hi Christof,

SSL/HTTPS configuration can be a nightmare indeed :) We don't provide it preconfigured in the Community Edition, it is part of the Enterprise Edition. Good news is that Nothing prevents you from doing it manually in the Community Edition, it's just that it's a tedious and complex task :P

Regards,

Cedric

[Christof Gonçalves]

Hi,

thanks for your reply :) I will check what I can do about the HTTPS

Best regards

[Frédéric Fanchamps]

Hi,

https://datafari.atlassian.net/wiki/spaces/DATAFARI/pages/509575169/Differences+between+the+Community+and+Enterprise+Editions+of+Datafari

lists https = yes in the community edition column.

Does it mean that now https is built in the community edition, or just that it is possible to make it work ourselves?

Fred

[cedric...@francelabs.com]

Hi Frederic,

Nothing really changed, sorry if the differences page may be misunderstood: we list that https is available on both the Community and Enterprise Edition, which is true. But the difference is that the Community edition requires some heavy DIY to make it work, while it's fully preconfigured on the Enterprise Edition. Hope it makes it clearer !

Regards,

Cedric