Communication with Neo4j https

Question

Is there a way to allow only https, not http, to communicate with the Neo4j server? Also, which channel uses Neo4j Shell, http or https communication?

Answer 1

From http://docs.neo4j.org/chunked/stable/security-server.html :

HTTPS Support The Neo4j server includes built-in support for SSL-encrypted communication over HTTPS. When you first start the server, it automatically generates a self-signed SSL certificate and private key. Since the certificate is signed on its own, it is not safe to use it for use; instead, you must provide your own key and certificate for use by the server.

, neo4j-server.properties, :

# Certificate location (auto generated if the file does not exist)
org.neo4j.server.webserver.https.cert.location=ssl/snakeoil.cert

# Private key location (auto generated if the file does not exist)
org.neo4j.server.webserver.https.key.location=ssl/snakeoil.key
Note that the key should be unencrypted. Make sure you set correct permissions on the private key, so that only the Neo4j server user can read/write it.

Neo4j SSL-. , PEM , DER.

, HTTPS , HTTPS:

# Turn https-support on/off
org.neo4j.server.webserver.https.enabled=true

# https port (for all data, administrative, and UI access)
org.neo4j.server.webserver.https.port=443

: Neo4j Shell, http https? - http.

Answer 2

Neo4j :

HTTPS

Neo4j SSL- HTTPS. SSL . , , .

, neo4j-server.properties, :

# Certificate location (auto generated if the file does not exist)
org.neo4j.server.webserver.https.cert.location=ssl/snakeoil.cert

# Private key location (auto generated if the file does not exist)
org.neo4j.server.webserver.https.key.location=ssl/snakeoil.key

, . , , Neo4j / .

Neo4j SSL-. , PEM , DER.

, HTTPS , HTTPS:

# Turn https-support on/off
org.neo4j.server.webserver.https.enabled=true

# https port (for all data, administrative, and UI access)
org.neo4j.server.webserver.https.port=443