[jira] [Closed] (SOLR-14357) solrj: using insecure namedCurves

["Bernd Wahlen (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SOLR-14357?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Bernd Wahlen closed SOLR-14357.
-------------------------------

> solrj: using insecure namedCurves
> ---------------------------------
>
>                 Key: SOLR-14357
>                 URL: https://issues.apache.org/jira/browse/SOLR-14357
>             Project: Solr
>          Issue Type: Bug
>            Reporter: Bernd Wahlen
>            Priority: Major
>
> i tried to run our our backend with solrj 8.4.1 on jdk14 and get the following error:
> Caused by: java.lang.IllegalArgumentException: Error in security property. Constraint unknown: c2tnb191v1
> after i removed all the X9.62 algoriths from the property jdk.disabled.namedCurves in
> /usr/lib/jvm/java-14-openjdk-14.0.0.36-1.rolling.el7.x86_64/conf/security/java.security
> everything is running.
> This does not happend on staging (i think because of only 1 solr node - not using lb client).
> We do not set or change any ssl settings in solr.in.sh.
> I don't know how to fix that (default config?, apache client settings?), but i think using insecure algorithms may be  a security risk and not only a jdk14 issue.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@lucene.apache.org
For additional commands, e-mail: issues-help@lucene.apache.org