[GitHub] [solr] madrob commented on a change in pull request #614: SOLR-15965 Use proper signatures for SolrAuth

[GitBox <gi...@apache.org>]

madrob commented on a change in pull request #614:
URL: https://github.com/apache/solr/pull/614#discussion_r802090968



##########
File path: solr/solr-ref-guide/src/major-changes-in-solr-9.adoc
##########
@@ -53,7 +53,11 @@ SolrCloud doesn't support that but may sometime.
 
 * SOLR-14702: All references to "master" and "slave" were replaced in the code with "leader" and "follower".
 This includes API calls for the replication handler and metrics.
-For rolling upgrades into 9.0, you need to be on Solr version 8.7 or greater. Some metrics also changed, alerts and  monitors on Solr KPIs that mention "master" or "slave" will also now be "leader" and "follower"
+For rolling upgrades into 9.0, you need to be on Solr version 8.7 or greater. Some metrics also changed, alerts and monitors on Solr KPIs that mention "master" or "slave" will also now be "leader" and "follower"
+
+* SOLR-15965: Internode communication secured by PKI Authentication has changed formats. To maintain compatability, you will need to either:
+** Upgrade the cluster to 8.11.2 or newer before proceeding to 9.0
+** Set system properties `solr.pki.sendVersion=v1` and `solr.pki.acceptVersions=v1,v2` on the upgraded nodes. After the whole cluster has been upgraded, you can optionally remove them and perform an additional rolling restart to reject requests coming in via the old format. For more information, see <<authentication-and-authorization-plugins.adoc#_pkiauthenticationplugin,PKI Authentication Plugin>>.

Review comment:
       🤦 




-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org