Encryption properties
Use this section as a reference for encryption properties located in spectrum-container.properties.
HTTPS and HTTP properties
These properties are located in the "Spectrum http settings" section of spectrum-container.properties.
| Property | Description |
|---|---|
| spectrum.http.enabled | Enable/disable basic HTTP |
| spectrum.http.port | HTTP port |
| spectrum.https.enabled | Enable/disable basic HTTPS |
| spectrum.https.port | HTTPS port |
| spectrum.https.encryption.validateCerts | Should certificates be validated? |
| spectrum.https.encryption.trustAll | Trust all certificates if no keystore or truststore are provided? |
| spectrum.https.encryption.selfSignedCert | Are certificates self-signed? |
| spectrum.https.encryption.trustAllHosts | Is hostname verification disabled? |
| spectrum.https.encryption.keystoreType | Keystore type: pkcs12 or jks |
| spectrum.https.encryption.keystore | Keystore file name in <spectruminstallationdirectory>/server/ app/conf/certs |
| spectrum.https.encryption.keystorePassword | Keystore password |
| spectrum.https.encryption.keystoreAlias | Alias of certificate, if applicable, or use first key found |
| spectrum.https.encryption.truststoreType | Truststore type: pkcs12 or jks |
| spectrum.https.encryption.truststore | Truststore file name in <spectruminstallationdirectory>/server/ app/conf/certs |
| spectrum.https.encryption.truststorePassword | Truststore password |
Caching properties
These properties are located in the “Cache settings (Hazelcast)” section of
spectrum-container.properties.
| Property | Description |
|---|---|
| spectrum.cache.encryption.keystoreType | Keystore type: pkcs12 or jks |
| spectrum.cache.encryption.keystore | Keystore file name in <spectruminstallationdirectory>/server/ app/conf/certs |
| spectrum.cache.encryption.keystorePassword | Keystore password |
| spectrum.cache.encryption.truststoreType | Truststore type: pkcs12 or jks |
| spectrum.cache.encryption.truststore | Truststore file name in <spectruminstallationdirectory>/server/ app/conf/certs |
| spectrum.cache.encryption.truststorePassword | Truststore password |
Indexing properties
These properties are found in the “Index settings (Elasticsearch)” section of spectrum-container.properties.
| Property | Description |
|---|---|
| spectrum.index.encryption.enabled | Enable/disable encryption on indexing |
| spectrum.index.encryption.trustAllHosts | Is hostname verification disabled? |
| spectrum.index.encryption.node.keystoreType | Node keystore type: pkcs12 or jks |
| spectrum.index.encryption.node.keystoreAlias | Alias of node certificate, if applicable, or use first key found |
| spectrum.index.encryption.node.keystore |
Node keystore name in <spectruminstallationdirectory>/server/app/conf/certs |
| spectrum.index.encryption.node.keystorePassword |
Node keystore password in <spectruminstallationdirectory>/server/app/conf/certs |
| spectrum.index.encryption.node.truststoreType | Node truststore type: pkcs12 or jks |
| spectrum.index.encryption.node.truststore |
Node keystore name in <spectruminstallationdirectory>/server/app/conf/certs |
| spectrum.index.encryption.node.truststorePassword | Node truststore password |
| spectrum.index.encryption.node.dn | Distinguished name of certificate used in node communications with indexing |
| spectrum.index.encryption.client.keystoreType | Client keystore type: pkcs12 or jks |
| spectrum.index.encryption.client.keystoreAlias | Client keystore name |
| spectrum.index.encryption.client.keystore |
Name of client keystore file <spectruminstallationdirectory>/server/app/conf/certs |
| spectrum.index.encryption.client.keystorePassword | Client keyword password |
| spectrum.index.encryption.client.truststoreType | Client truststore type: pkcs12 or jks |
| spectrum.index.encryption.client.truststore |
Name of client truststore file in <spectruminstallationdirectory>/server/app/conf/certs |
| spectrum.index.encryption.client.truststorePassword | Client truststore password |
| spectrum.index.encryption.client.dn | Distinguished name of certificate used in client communications with indexing |