Skip to content
This repository has been archived by the owner on Aug 6, 2020. It is now read-only.

Add a strong warning to all driver pages about 4.0 and encryption #200

Open
jexp opened this issue Apr 2, 2020 · 4 comments
Open

Add a strong warning to all driver pages about 4.0 and encryption #200

jexp opened this issue Apr 2, 2020 · 4 comments

Comments

@jexp
Copy link
Contributor

jexp commented Apr 2, 2020

Something along the lines:

  • driver behavior in 4.0 changed, doesn't trust self-signed certs anymore, but encrypted=true by default
  • if you don't have a proper trusted certificate (e.g. in Docker) you have to use encryption=false
  • link to davids article for lets's encrypt
@adam-cowley
Copy link
Collaborator

How about this as note at the bottom of each Driver page?

****
[NOTE]
From Neo4j version 4.0 and onwards, the default encryption setting is *off* by default and Neo4j will no longer generate self-signed certificates when none is provided.
When connecting to a Neo4j server with encryption enabled, you must use the `neo4j+s` scheme for a trusted certificate or `neo4j+ssc` for a self-signed certificate.

- https://neo4j.com/docs/operations-manual/4.0/security/ssl-framework/[SSL Framework settings^]
- https://neo4j.com/docs/migration-guide/4.0/upgrade-driver/#_configure_ssl_policy_for_bolt_server_and_https_server[More information on configuring an SSL policy^].
- https://medium.com/neo4j/getting-certificates-for-neo4j-with-letsencrypt-a8d05c415bbd[How to generate certificates for Neo4j with Letsencrypt^]
****

dotnet-driver.adoc, java-driver.adoc, javascript-driver.adoc

No 4.0 drivers yet for python or go.

@jexp
Copy link
Contributor Author

jexp commented Apr 2, 2020

Probably directly in the official driver section. Not end of page

You can use a shared include for the box.

@jexp
Copy link
Contributor Author

jexp commented Apr 2, 2020

And use text links in the text not plain urls perhaps? If there is no cert then they need to turn encryption off right? Which is the case in desktop and docker or?

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants