Re: Secure SSL connections between Solr and ZooKeeper

2022-03-25 Thread Sam Lee
On 2022-03-25 03:43 +, Sam Lee wrote: > The solution is to add the appropriate ZooKeeper Java properties. Notice > that these are exactly the same properties needed by standalone > ZooKeeper's 'zkServer.sh' and 'zkCli.sh' to connect to ZooKeeper via > SSL [1] [2]. Add the following to bin/solr.

Re: Secure SSL connections between Solr and ZooKeeper

2022-03-25 Thread Jan Høydahl
This has been working for a few years already, but there is a lack of documentation, see https://issues.apache.org/jira/browse/SOLR-7889 and children. We are very happy for contributions to the documentation, in particular https://issues.apache.org/jira/browse/SOLR-7893 ! Jan > 25. mar. 2022

Re: Secure SSL connections between Solr and ZooKeeper

2022-03-24 Thread Sam Lee
I think I've found the way to connect SolrCloud to an external ZooKeeper ensemble via SSL. By default, Solr does not use SSL to connect to ZooKeeper. So if the ZooKeeper configuration requires SSL for client connections, Solr will complain like this when it tries to connect to ZooKeeper: --8<

Re: Secure SSL connections between Solr and ZooKeeper

2022-03-24 Thread Sam Lee
On 2022-03-24 04:42 +, Sam Lee wrote: > In my ZooKeeper configuration (zoo.cfg), I have this: > > secureClientPort=2182 > #clientPort=2181 # Disabled. Allow secure connections only. > > ssl.clientAuth=need > ssl.keystore.location=/opt/zookeeper/conf/zk-keystore.jks > ssl.ke