Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-43151

Enforce TLS -UI

    XMLWordPrintable

Details

    • Untriaged
    • 1
    • Unknown

    Description

      The UI currently has a check box for "enable node-to-node encryption" when starting cluster. However, I'm not sure there is a UI security settings, which enables setting cluster encryption level. 

      Cluster encryption levels are:

      "control": Only control messages minus data(in buckets) are encrypted.

      "all": all data is encrypted on the cluster.

      "strict": all data is encrypted plus disable all the non-ssl ports on non-loopback interfaces.

      They can be set as below, only when all the nodes in the cluster have node-2-node encryption enabled. 

      curl -sX POST -u Administrator:password http://localhost:9000/settings/security -d "clusterEncryptionLevel=strict"

       

      Attachments

        Issue Links

          blocks

          Improvement - An improvement or enhancement to an existing feature or task. MB-12175 Crypto: Enforce TLS

          • Major - Major loss of function.
          • Closed
          depends on

          Bug - A problem which impairs or prevents the functions of the product. MB-42373 Enforce TLS - NS-Server

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. MB-43102 Crypto: Enforce TLS API

          • Major - Major loss of function.
          • Closed
          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              raluca.lupu Raluca Lupu
              Abhijeeth.Nuthan Abhijeeth Nuthan
              Votes:
              0 Vote for this issue
              Watchers:
              11 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty