Issues
- Node discovery uses the HTTP (not HTTPS) scheme by default and isn't configurableHSEARCH-2593Resolved issue: HSEARCH-2593Yoann Rodière
- Upgrade to Apache Lucene 5.5.4HSEARCH-2591Resolved issue: HSEARCH-2591Sanne Grinovero
- ElasticsearchHSQueryImpl allocates too much memory for query resultsHSEARCH-2590Resolved issue: HSEARCH-2590Yoann Rodière
- Sort DSL on embedded fields throws NPEHSEARCH-2587Resolved issue: HSEARCH-2587Yoann Rodière
- Upgrade the Elasticsearch version used for tests to 2.4.4HSEARCH-2573Resolved issue: HSEARCH-2573Yoann Rodière
- Missing labels for cross references in documentationHSEARCH-2572Resolved issue: HSEARCH-2572Sanne Grinovero
- The "delete-by-query" plugin requirement for Elasticsearch isn't clearHSEARCH-2569Resolved issue: HSEARCH-2569Yoann Rodière
- Remove obsolete entries from the "limitations" section of the Elasticsearch integration documentationHSEARCH-2558Resolved issue: HSEARCH-2558Yoann Rodière
- Add support for Elasticsearch authenticationHSEARCH-2453Resolved issue: HSEARCH-2453Yoann Rodière
9 of 9
Node discovery uses the HTTP (not HTTPS) scheme by default and isn't configurable
Fixed
Description
Details
Assignee
Yoann RodièreYoann RodièreReporter
Yoann RodièreYoann RodièreComponents
Fix versions
Affects versions
Priority
Major
Details
Details
Assignee
Yoann Rodière
Yoann Rodière
Reporter
Yoann Rodière
Yoann RodièreComponents
Fix versions
Affects versions
Priority
MajorCreated February 17, 2017 at 4:27 PM
Updated February 21, 2017 at 8:47 PM
Resolved February 21, 2017 at 6:46 PM
Activity
Show:
Discovered node are added with
http://URLs by default, which is bad considering users can enable authentication, and when using HTTP the credentials (username + password) are transmitted in clear text over the network. So even if we don't care about privacy, the security of the systems will get compromised quite fast.Jest allows to configure that through
builder.defaultSchemeForDiscoveredNodes(String). We should add a configuration property that we would map to this method.Note that it's the same with the official REST client discovery: the scheme is HTTP by default and cannot be discovered automatically.