You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@solr.apache.org by "Victoria Stuart (VictoriasJourney.com)" <ma...@VictoriasJourney.com> on 2022/08/17 04:17:37 UTC
Cannot SSL-secure Solr 8 on Java 1.8 JRE (HTTP/1 , HTTP/2 issue)
Hello. Per
https://solr.apache.org/guide/8_11/solr-system-requirements.html
https://solr.apache.org/guide/8_11/enabling-ssl.html
I am trying to take Solr 8.11.1 to production on a CentOS 7 cloud VPS.
Solr 8.11.1 is working fine (SSL-secured; authentication via security.json; etc.) on my Arch Linux local host.
I installed Solr 8.11.1 via solr.in.sh, and tried it with Java JRE 1.8 (details below) and java-11-openjdk.x86_64.
java-11-openjdk.x86_64 ## /usr/lib/jvm/java-11-openjdk-11.0.16.0.8-1.el7_9.x86_64/bin/java
java-1.8.0-openjdk.x86_64 ## /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.342.b07-1.el7_9.x86_64/jre/bin/java
Solr worked with the Java 11 OpenJDK, but I was unable to SSL-secure it.
Solr also works on the Java 1.8 JRE, but complains
HTTP/2 + SSL is not support in Java 8.
Configure Solr with HTTP/1.1 + SSL
How can I resolve this issue?
-------------------------------------------------------------------------------
[victoria@vps1234 ~]$ date
Tue Aug 16 20:55:23 PDT 2022
[victoria@vps1234 ~]$ cat /etc/centos-release
CentOS Linux release 7.9.2009 (Core)
[victoria@vps1234 ~]$ uname -a
Linux vps1234.inmotionhosting.com 3.10.0 #1 SMP Tue Jan 25 12:49:12 MSK 2022 x86_64 x86_64 x86_64 GNU/Linux
[victoria@vps1234 ~]$ which java
/usr/bin/java
[victoria@vps1234 ~]$ java -version
openjdk version "1.8.0_342"
OpenJDK Runtime Environment (build 1.8.0_342-b07)
OpenJDK 64-Bit Server VM (build 25.342-b07, mixed mode)
[victoria@vps1234 ~]$ echo $JAVA_HOME
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.342.b07-1.el7_9.x86_64/jre
[victoria@vps1234 ~]$ echo $SOLR_JAVA_HOME
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.342.b07-1.el7_9.x86_64/jre/
[victoria@vps1234 ~]$ sudo service solr start
HTTP/2 + SSL is not support in Java 8.
Configure Solr with HTTP/1.1 + SSL
Waiting up to 30 seconds to see Solr running on port 8983 [\]
Started Solr server on port 8983 (pid=1355). Happy searching!
[victoria@vps1234 ~]$ sudo service solr status
HTTP/2 + SSL is not support in Java 8.
Configure Solr with HTTP/1.1 + SSL
Found 1 Solr nodes:
Solr process 1355 running on port 8983
INFO - 2022-08-16 19:55:03.830; org.apache.solr.util.configuration.SSLConfigurations; Setting javax.net.ssl.keyStorePassword
INFO - 2022-08-16 19:55:03.834; org.apache.solr.util.configuration.SSLConfigurations; Setting javax.net.ssl.trustStorePassword
{
"solr_home":"/home/victoria/apps/solr-8.11.1/server/solr",
"version":"8.11.1 0b002b11819df70783e83ef36b42ed1223c14b50 - janhoy - 2021-12-14 13:50:55",
"startTime":"2022-08-17T03:47:52.140Z",
"uptime":"0 days, 0 hours, 7 minutes, 13 seconds",
"memory":"162.5 MB (%31.7) of 512 MB"}
[victoria@vps1234 ~]$
==============================================================================
Re: Cannot SSL-secure Solr 8 on Java 1.8 JRE (HTTP/1 , HTTP/2 issue)
Posted by Mike Drob <md...@apache.org>.
I think this is covered in the ref guide
https://solr.apache.org/guide/8_11/major-changes-in-solr-8.html#ssl-support-with-http2
In order to support SSL over HTTP/2 connections, Solr uses ALPN.
Java 8 does not include an implementation of ALPN, therefore Solr will
start with HTTP/1 only when SSL is enabled and Java 8 is in use.
On Tue, Aug 16, 2022 at 11:37 PM Victoria Stuart (VictoriasJourney.com) <
mail@victoriasjourney.com> wrote:
> Some additional information.
>
> [victoria@vps1234 ~]$ sudo lsof -i -P -n | grep LISTEN | grep solr
>
> java 1355 solr 158u IPv6 2046156989 0t0 TCP 127.0.0.1:7983
> (LISTEN)
> java 1355 solr 175u IPv6 2046024279 0t0 TCP *:8983 (LISTEN)
>
> [victoria@vps1234 ~]$ sudo systemctl status httpd
>
> ● httpd.service - The Apache HTTP Server
> Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor
> preset: disabled)
> Active: active (running) since Tue 2022-08-16 20:45:10 PDT; 46min ago
> ...
>
> [victoria@vps1234 ~]$ sudo systemctl status sshd
>
> ● sshd.service - OpenSSH server daemon
> Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled; vendor
> preset: enabled)
> Active: active (running) since Tue 2022-08-16 20:45:10 PDT; 46min ago
> ...
>
>
> -------------------------------------------------------------------------------
>
> https://my_web_site.com:8983/ >> Unable to connect ...
>
>
>
> ==============================================================================
> ----- Original Message(s): -----
> Date: 2022 Aug 16 (Tue) 21:17
> From: "Victoria Stuart (VictoriasJourney.com)" <ma...@VictoriasJourney.com>
> To: users@solr.apache.org
> Cc: mail@VictoriasJourney.com
> Subject: Cannot SSL-secure Solr 8 on Java 1.8 JRE (HTTP/1 , HTTP/2 issue)
>
> Hello. Per
>
> https://solr.apache.org/guide/8_11/solr-system-requirements.html
> https://solr.apache.org/guide/8_11/enabling-ssl.html
>
> I am trying to take Solr 8.11.1 to production on a CentOS 7 cloud VPS.
>
> Solr 8.11.1 is working fine (SSL-secured; authentication via
> security.json; etc.) on my Arch Linux local host.
>
> I installed Solr 8.11.1 via solr.in.sh, and tried it with Java JRE 1.8
> (details below) and java-11-openjdk.x86_64.
>
> java-11-openjdk.x86_64 ##
> /usr/lib/jvm/java-11-openjdk-11.0.16.0.8-1.el7_9.x86_64/bin/java
> java-1.8.0-openjdk.x86_64 ##
> /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.342.b07-1.el7_9.x86_64/jre/bin/java
>
> Solr worked with the Java 11 OpenJDK, but I was unable to SSL-secure it.
>
> Solr also works on the Java 1.8 JRE, but complains
>
> HTTP/2 + SSL is not support in Java 8.
> Configure Solr with HTTP/1.1 + SSL
>
> How can I resolve this issue?
>
>
> -------------------------------------------------------------------------------
>
> [victoria@vps1234 ~]$ date
> Tue Aug 16 20:55:23 PDT 2022
>
> [victoria@vps1234 ~]$ cat /etc/centos-release
> CentOS Linux release 7.9.2009 (Core)
>
> [victoria@vps1234 ~]$ uname -a
> Linux vps1234.inmotionhosting.com 3.10.0 #1 SMP Tue Jan 25 12:49:12 MSK
> 2022 x86_64 x86_64 x86_64 GNU/Linux
>
> [victoria@vps1234 ~]$ which java
> /usr/bin/java
>
> [victoria@vps1234 ~]$ java -version
>
> openjdk version "1.8.0_342"
> OpenJDK Runtime Environment (build 1.8.0_342-b07)
> OpenJDK 64-Bit Server VM (build 25.342-b07, mixed mode)
>
> [victoria@vps1234 ~]$ echo $JAVA_HOME
> /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.342.b07-1.el7_9.x86_64/jre
>
> [victoria@vps1234 ~]$ echo $SOLR_JAVA_HOME
> /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.342.b07-1.el7_9.x86_64/jre/
>
> [victoria@vps1234 ~]$ sudo service solr start
>
> HTTP/2 + SSL is not support in Java 8.
> Configure Solr with HTTP/1.1 + SSL
>
> Waiting up to 30 seconds to see Solr running on port 8983 [\]
> Started Solr server on port 8983 (pid=1355). Happy searching!
>
> [victoria@vps1234 ~]$ sudo service solr status
>
> HTTP/2 + SSL is not support in Java 8.
> Configure Solr with HTTP/1.1 + SSL
>
> Found 1 Solr nodes:
>
> Solr process 1355 running on port 8983
> INFO - 2022-08-16 19:55:03.830;
> org.apache.solr.util.configuration.SSLConfigurations; Setting
> javax.net.ssl.keyStorePassword
> INFO - 2022-08-16 19:55:03.834;
> org.apache.solr.util.configuration.SSLConfigurations; Setting
> javax.net.ssl.trustStorePassword
> {
> "solr_home":"/home/victoria/apps/solr-8.11.1/server/solr",
> "version":"8.11.1 0b002b11819df70783e83ef36b42ed1223c14b50 - janhoy -
> 2021-12-14 13:50:55",
> "startTime":"2022-08-17T03:47:52.140Z",
> "uptime":"0 days, 0 hours, 7 minutes, 13 seconds",
> "memory":"162.5 MB (%31.7) of 512 MB"}
>
> [victoria@vps1234 ~]$
>
>
> ==============================================================================
>
Re: Cannot SSL-secure Solr 8 on Java 1.8 JRE (HTTP/1 , HTTP/2 issue)
Posted by "Victoria Stuart (VictoriasJourney.com)" <ma...@VictoriasJourney.com>.
Some additional information.
[victoria@vps1234 ~]$ sudo lsof -i -P -n | grep LISTEN | grep solr
java 1355 solr 158u IPv6 2046156989 0t0 TCP 127.0.0.1:7983 (LISTEN)
java 1355 solr 175u IPv6 2046024279 0t0 TCP *:8983 (LISTEN)
[victoria@vps1234 ~]$ sudo systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
Active: active (running) since Tue 2022-08-16 20:45:10 PDT; 46min ago
...
[victoria@vps1234 ~]$ sudo systemctl status sshd
● sshd.service - OpenSSH server daemon
Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled; vendor preset: enabled)
Active: active (running) since Tue 2022-08-16 20:45:10 PDT; 46min ago
...
-------------------------------------------------------------------------------
https://my_web_site.com:8983/ >> Unable to connect ...
==============================================================================
----- Original Message(s): -----
Date: 2022 Aug 16 (Tue) 21:17
From: "Victoria Stuart (VictoriasJourney.com)" <ma...@VictoriasJourney.com>
To: users@solr.apache.org
Cc: mail@VictoriasJourney.com
Subject: Cannot SSL-secure Solr 8 on Java 1.8 JRE (HTTP/1 , HTTP/2 issue)
Hello. Per
https://solr.apache.org/guide/8_11/solr-system-requirements.html
https://solr.apache.org/guide/8_11/enabling-ssl.html
I am trying to take Solr 8.11.1 to production on a CentOS 7 cloud VPS.
Solr 8.11.1 is working fine (SSL-secured; authentication via security.json; etc.) on my Arch Linux local host.
I installed Solr 8.11.1 via solr.in.sh, and tried it with Java JRE 1.8 (details below) and java-11-openjdk.x86_64.
java-11-openjdk.x86_64 ## /usr/lib/jvm/java-11-openjdk-11.0.16.0.8-1.el7_9.x86_64/bin/java
java-1.8.0-openjdk.x86_64 ## /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.342.b07-1.el7_9.x86_64/jre/bin/java
Solr worked with the Java 11 OpenJDK, but I was unable to SSL-secure it.
Solr also works on the Java 1.8 JRE, but complains
HTTP/2 + SSL is not support in Java 8.
Configure Solr with HTTP/1.1 + SSL
How can I resolve this issue?
-------------------------------------------------------------------------------
[victoria@vps1234 ~]$ date
Tue Aug 16 20:55:23 PDT 2022
[victoria@vps1234 ~]$ cat /etc/centos-release
CentOS Linux release 7.9.2009 (Core)
[victoria@vps1234 ~]$ uname -a
Linux vps1234.inmotionhosting.com 3.10.0 #1 SMP Tue Jan 25 12:49:12 MSK 2022 x86_64 x86_64 x86_64 GNU/Linux
[victoria@vps1234 ~]$ which java
/usr/bin/java
[victoria@vps1234 ~]$ java -version
openjdk version "1.8.0_342"
OpenJDK Runtime Environment (build 1.8.0_342-b07)
OpenJDK 64-Bit Server VM (build 25.342-b07, mixed mode)
[victoria@vps1234 ~]$ echo $JAVA_HOME
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.342.b07-1.el7_9.x86_64/jre
[victoria@vps1234 ~]$ echo $SOLR_JAVA_HOME
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.342.b07-1.el7_9.x86_64/jre/
[victoria@vps1234 ~]$ sudo service solr start
HTTP/2 + SSL is not support in Java 8.
Configure Solr with HTTP/1.1 + SSL
Waiting up to 30 seconds to see Solr running on port 8983 [\]
Started Solr server on port 8983 (pid=1355). Happy searching!
[victoria@vps1234 ~]$ sudo service solr status
HTTP/2 + SSL is not support in Java 8.
Configure Solr with HTTP/1.1 + SSL
Found 1 Solr nodes:
Solr process 1355 running on port 8983
INFO - 2022-08-16 19:55:03.830; org.apache.solr.util.configuration.SSLConfigurations; Setting javax.net.ssl.keyStorePassword
INFO - 2022-08-16 19:55:03.834; org.apache.solr.util.configuration.SSLConfigurations; Setting javax.net.ssl.trustStorePassword
{
"solr_home":"/home/victoria/apps/solr-8.11.1/server/solr",
"version":"8.11.1 0b002b11819df70783e83ef36b42ed1223c14b50 - janhoy - 2021-12-14 13:50:55",
"startTime":"2022-08-17T03:47:52.140Z",
"uptime":"0 days, 0 hours, 7 minutes, 13 seconds",
"memory":"162.5 MB (%31.7) of 512 MB"}
[victoria@vps1234 ~]$
==============================================================================