8.6.1 configuring ssl on centos 7

["Bogdan C." <lu...@yahoo.com.INVALID>]

Hi All,
Solr is installed and working on http (8983). I (think I) have the keystore configured properly and solr.in.sh modified for the SOLR_SSL_* config settings.
Not sure how to modify the service startup to listen on 8984 for ssl. solr documentation says to start it using bin/solr -p 8984 its configured to start as a service so nt sure that applies here... I modified solr.in.sh with SOLR_PORT=8984 but it still starts up on 8983.

Trying to browse ssl on 8983 has error below which is expected I think (trying to browse ssl on an endpoint that is not listening for ssl): An error occurred during a connection to 192.168.100.23:8983. SSL received a record that exceeded the maximum permissible length. Error code: SSL_ERROR_RX_RECORD_TOO_LONG

[centos@server /]$ sudo service solr status HTTP/2 + SSL is not support in Java 8. Configure Solr with HTTP/1.1 + SSL

Found 1 Solr nodes:

Solr process 13785 running on port 8983 INFO - 2020-11-29 15:32:45.126; org.apache.solr.util.configuration.SSLConfigurations; Setting javax.net.ssl.keyStorePassword INFO - 2020-11-29 15:32:45.132; org.apache.solr.util.configuration.SSLConfigurations; Setting javax.net.ssl.trustStorePassword { "solr_home":"/var/solr/data", "version":"8.7.0 2dc63e901c60cda27ef3b744bc554f1481b3b067 - atrisharma - 2020-10-29 19:39:16", "startTime":"2020-11-29T15:14:44.265Z", "uptime":"0 days, 0 hours, 18 minutes, 1 seconds", "memory":"104.5 MB (%20.4) of 512 MB"}

I feel like im missing something basic, any help would be appreciated!
Thanks,B

Re: 8.6.1 configuring ssl on centos 7

["Bogdan C." <lu...@yahoo.com.INVALID>]

 Thanks for replying Shawn.Yea etc/default/solr.in.sh is updated for for 8984 and theres no modification to /etc/init.d/solrThere's no SSL related errors in the logs on startup the entry below confuses me even more
2020-12-14 13:24:50.811 INFO  (main) [   ] o.e.j.s.AbstractConnector Started ServerConnector@13fd2ccd{SSL, (ssl, http/1.1)}{0.0.0.0:8983}

Thanks,Bogdan


    On Sunday, December 13, 2020, 2:26:51 p.m. EST, Shawn Heisey <ap...@elyograg.org> wrote:  
 
 On 12/13/2020 7:21 AM, Bogdan C. wrote:
> Solr is installed and working on http (8983). I (think I) have the keystore configured properly and solr.in.sh modified for the SOLR_SSL_* config settings.
> Not sure how to modify the service startup to listen on 8984 for ssl. solr documentation says to start it using bin/solr -p 8984 its configured to start as a service so nt sure that applies here... I modified solr.in.sh with SOLR_PORT=8984 but it still starts up on 8983.

If you installed Solr as a service, then you'll need to edit 
/etc/default/solr.in.sh ... the one that's in the bin directory is ignored.

If that's the one you did edit, then I do not know why it isn't working 
... unless maybe /etc/init.d/solr has also been modified.  If that has 
happened, you would need to consult with whoever modified it.

Thanks,
Shawn

  

Re: 8.6.1 configuring ssl on centos 7

[Shawn Heisey <ap...@elyograg.org>]

On 12/13/2020 7:21 AM, Bogdan C. wrote:
> Solr is installed and working on http (8983). I (think I) have the keystore configured properly and solr.in.sh modified for the SOLR_SSL_* config settings.
> Not sure how to modify the service startup to listen on 8984 for ssl. solr documentation says to start it using bin/solr -p 8984 its configured to start as a service so nt sure that applies here... I modified solr.in.sh with SOLR_PORT=8984 but it still starts up on 8983.

If you installed Solr as a service, then you'll need to edit 
/etc/default/solr.in.sh ... the one that's in the bin directory is ignored.

If that's the one you did edit, then I do not know why it isn't working 
... unless maybe /etc/init.d/solr has also been modified.  If that has 
happened, you would need to consult with whoever modified it.

Thanks,
Shawn