You are viewing a plain text version of this content. The canonical link for it is here.
Posted to solr-user@lucene.apache.org by Kirk Fitzsimons <KI...@ie.ibm.com> on 2020/03/12 16:23:18 UTC
Secure communication between Solr and Zookeeper
Is it possible to secure communication between Solr(8.3.1) and Zookeeper
(3.5.5)?
We have followed the guide
https://cwiki.apache.org/confluence/display/ZOOKEEPER/ZooKeeper+SSL+User
+Guide
When we try the below command it hangs and fails to connect to zookeeper.
solr/server/scripts/cloud-scripts$ ./zkcli.sh -zkhost localhost:2281 -cmd
ls
INFO - 2020-03-12 14:08:41.438;
org.apache.solr.common.cloud.ConnectionManager; Waiting for client to
connect to ZooKeeper
In the zookeeper logs we can see the following error:
io.netty.handler.codec.DecoderException:
io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record
Kirk Fitzsimons
Re: Secure communication between Solr and Zookeeper
Posted by ChienHuaWang <ch...@sap.com>.
Hi Jan,
Could you advise more detail in step by step how we setup between Solr &
Zookeeper?
Do we need to put jetty-all.jar of Zookeeper 3.5.5 to the classpath of Solr?
or it has been taken care?
What's the configuration we need for SSL-enabled Zookeeper to communicate
with Solr?
--
Sent from: https://lucene.472066.n3.nabble.com/Solr-User-f472068.html
Re: Secure communication between Solr and Zookeeper
Posted by Jan Høydahl <ja...@cominvent.com>.
I’m sorry, I don’t have the possibility of completing that now. As I said you have some pointers in https://issues.apache.org/jira/browse/SOLR-7893 <https://issues.apache.org/jira/browse/SOLR-7893> but is it not completed, so this is currently an undocumented (and unsupported) feature. That means you’re on your own.
The documentation from ZK project should be enough, and I got it working on a local test once but then I needed to use JDK 14 and not JDK 11, don’t know why.
If you make it work, please contribute insights in the above JIRA issue.
Jan
> 14. mai 2020 kl. 05:47 skrev ChienHuaWang <ch...@sap.com>:
>
> Hi Jan,
> Could you provide more detail what are the steps to setup between zookeeper
> & Solr?
>
>
>
> --
> Sent from: https://lucene.472066.n3.nabble.com/Solr-User-f472068.html
Re: Secure communication between Solr and Zookeeper
Posted by ChienHuaWang <ch...@sap.com>.
Hi Jan,
Could you provide more detail what are the steps to setup between zookeeper
& Solr?
--
Sent from: https://lucene.472066.n3.nabble.com/Solr-User-f472068.html
Re: Secure communication between Solr and Zookeeper
Posted by Jan Høydahl <ja...@cominvent.com>.
Not documented yet, see https://issues.apache.org/jira/browse/SOLR-7893
Jan Høydahl
> 10. mai 2020 kl. 12:48 skrev ChienHuaWang <ch...@sap.com>:
>
> Hi,
> Does anyone figure how to handle the TLS between Solr and Zookeeper?
> From Solr doc, I only find the Solr internal communication, no specific
> detail about how zookeeper should be handled.
> Appreciate any suggestion, thanks.
>
>
>
> --
> Sent from: https://lucene.472066.n3.nabble.com/Solr-User-f472068.html
Re: Secure communication between Solr and Zookeeper
Posted by ChienHuaWang <ch...@sap.com>.
Hi,
Does anyone figure how to handle the TLS between Solr and Zookeeper?
From Solr doc, I only find the Solr internal communication, no specific
detail about how zookeeper should be handled.
Appreciate any suggestion, thanks.
--
Sent from: https://lucene.472066.n3.nabble.com/Solr-User-f472068.html
Re: Secure communication between Solr and Zookeeper
Posted by Jan Høydahl <ja...@cominvent.com>.
This is tracked here https://issues.apache.org/jira/browse/SOLR-7893 - help needed!
There are many steps needed, and last time I tried I needed to use Java13 instead of Java11 for some reason.
Jan
> 12. mar. 2020 kl. 17:23 skrev Kirk Fitzsimons <KI...@ie.ibm.com>:
>
>
>
> Is it possible to secure communication between Solr(8.3.1) and Zookeeper
> (3.5.5)?
>
> We have followed the guide
> https://cwiki.apache.org/confluence/display/ZOOKEEPER/ZooKeeper+SSL+User
> +Guide
>
> When we try the below command it hangs and fails to connect to zookeeper.
>
> solr/server/scripts/cloud-scripts$ ./zkcli.sh -zkhost localhost:2281 -cmd
> ls
> INFO - 2020-03-12 14:08:41.438;
> org.apache.solr.common.cloud.ConnectionManager; Waiting for client to
> connect to ZooKeeper
>
> In the zookeeper logs we can see the following error:
>
> io.netty.handler.codec.DecoderException:
> io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record
>
> Kirk Fitzsimons