Install Neo4J in RHEL 7

Env : RHEL 7 hosted in AWS EC2
JDK : OpenJDK 11
Neo Version : 4.0.4 (community)

Issue : bolt.listen_address=0.0.0.0:7687
http.listen_address=0.0.0.0:7474

With these above mentioned configuration and bypassing proxy, I can login using neo4j/neo4j , however cannot create database. Possible issue : error in establishing bolt connection

Steps taken: Disabled HTTP and enable HTTPS.

https.listen_address : 0.0.0.0:7473.

Still not working.

My question :

  1. Is https compulsory for running neo4j browser and enable bolt connectivity? Can it be done on http too? If so how?

  2. If https is a must, how should I proceed?

welcome smaz19584,

In answer to your query, neo4j runs it's HTTP browser on 7474 (and secure HTTPS on 7473)
To run secure I believe you'll need to create/install and then setup neo4j to use a certificate, right?

If you have that setup, can you share how you are starting it, and the error message you see?

Created certificates using OpenSSL. Here are he cofigurations

dbms.default_listen_address=0.0.0.0

dbms.default_advertised_address= à Please note that there is no connectivity issue with private IP as I can open the browser and login with neo4j/neo4j credentials.

dbms.connector.bolt.enabled=true

dbms.connector.bolt.tls_level=OPTIONAL

dbms.connector.bolt.listen_address=0.0.0.0:7687

#dbms.connector.http.enabled=true

#dbms.connector.http.listen_address=0.0.0.0:7474

HTTPS Connector. There can be zero or one HTTPS connectors.

dbms.connector.https.enabled=true

dbms.connector.https.listen_address=0.0.0.0:7473

Number of Neo4j worker threads.

#dbms.threads.worker_count=

Bolt SSL configuration

dbms.ssl.policy.bolt.enabled=true

dbms.ssl.policy.bolt.base_directory=certificates/bolt

dbms.ssl.policy.bolt.private_key=server.key

dbms.ssl.policy.bolt.public_certificate=server.crt

Https SSL configuration

dbms.ssl.policy.https.enabled=true

dbms.ssl.policy.https.base_directory=certificates/https

dbms.ssl.policy.https.private_key=server.key

dbms.ssl.policy.https.public_certificate=server.crt