Starting Solr 8 with Java 8 and SSL

I have updated a Solr install to Solr 8.10 from 7.7.3, this works with no issues using http, but as soon as I try to use https it will not start. I have tried adding -Dsolr.http1=true to the command line but with no joy. Is there some other configuration I can apply to force Solr into using HT

Re: Starting Solr 8 with Java 8 and SSL

What error message do you get when you try to start solr with https? Can you provide more detail as to what you did to "use https"? Hard to know if switching to 1.1 would be a good idea here until we understand the problem better. On Mon, Dec 13, 2021 at 6:18 AM Horton, Alan wrote: > I have upda

Zookeeper and Solr and CVE-2021-44228

I presume this also needs fixing for zookeeper nodes? On 12/10/21 13:44, Walter Underwood wrote: Does all Solr logging go through slf4j? If so, that should protect against this vulnerability. If not, who has tested Solr with log4j 2.15.1? We are running 8.8.2. wunder Walter Underwood wun...@

RE: [EXT] Re: Starting Solr 8 with Java 8 and SSL

Initially a series of sessionExpiredExceptions: Eventually a timeoutException: Thanks -Original Message- From: Gus Heck mailto:gus.h...@gmail.com>> Sent: 13 December 2021 14:10 To: users@solr.apache.org Subject: [EXT] Re: Starting Solr 8 with Java 8 and SS

Re: Zookeeper and Solr and CVE-2021-44228

> On Dec 13, 2021, at 8:20 AM, Michael Conrad wrote: > > I presume this also needs fixing for zookeeper nodes? Anything that logs with log4j.

Re: Zookeeper and Solr and CVE-2021-44228

Zookeeper has not yet migrated to log4j2. Even their latest releases (3.6.3, 3.7.0) are still using version 1.2.17 of log4j. So I would think that Zookeeper would be in the same situation as the pre-7.4.0 Solr releases as described here: https://solr.apache.org/security.html#apache-solr-affected-b

RE: Solr Cloud Node re-join issue

So you're saying that Solr can use additional memory on top of what Xmx limits ? It appears the resident size keeps on increasing, swap was used at some point but it's not actively paging now. In FreeBSD you can use procstat or vmstat for more info root@solrcloud4:/usr/home/scott # procstat -r

Re: Zookeeper and Solr and CVE-2021-44228

Zookeeper 3.5.7 uses log4j 1.x, so is not vulnerable. I checked. wunder Walter Underwood wun...@wunderwood.org http://observer.wunderwood.org/ (my blog) > On Dec 13, 2021, at 6:20 AM, Michael Conrad wrote: > > I presume this also needs fixing for zookeeper nodes? > > On 12/10/21 13:44, Walter

Re: [ANNOUNCEMENT] Solr's Docker images were updated to remediate a CVE

For those of you like me who want to explicitly set the variable without relying on which of the two Docker images with the same tag you’re pulling down, and you’re using a Dockerfile to add on to make your own Solr Docker image, add these lines: # Add option to mitigate log4j security vulnerab

Re: [EXT] Re: Starting Solr 8 with Java 8 and SSL

This threw me for a while when I worked on it. Visit this page https://cwiki.apache.org/confluence/plugins/servlet/mobile?contentId=55153140#content/view/55153140 You need to treat Solr as a Zookeeper client and add the six system properties it recommends for ziCli.sh to your Solr.in.sh or simila

Re: [EXT] Re: Starting Solr 8 with Java 8 and SSL

Apologies for any typos, using a phone > On 13 Dec 2021, at 14:27, Horton, Alan > wrote: > > Initially a series of sessionExpiredExceptions: > > Eventually a timeoutException: > > > Thanks > > > -Original Message- > From: Gus Heck > Sent: 13 December 2021 14:10 > To: users@sol

Re: [EXT] Re: Starting Solr 8 with Java 8 and SSL

If you were pasting in images, that didn't work. They didn't come through. Generally it's a bad idea to send images to mailing lists since they are subject to the whims of how a particular list handles images or attachments. Furthermore, even if it does come through, you may be getting people readi

Re: Solr Cloud Node re-join issue

The heap size limits the Java heap. Java uses memory that is not in the heap — bytecodes, compiled code, stack, threadlocal, mapped memory, etc. wunder Walter Underwood wun...@wunderwood.org http://observer.wunderwood.org/ (my blog) > On Dec 13, 2021, at 7:53 AM, Scott wrote: > > So you're sa

RE: Solr Cloud Node re-join issue

I get this, so then is my experience similar to everyone else's ? Does swap usage just increase until you run out of it ? I mean, I've always taken this to be true and that's why I restart Solr once per month ... Is there a way to not have to do this ? That's how this thread all got started. Th

Re: Solr Cloud Node re-join issue

A monthly restart should not be necessary. We did a quarterly restart for one Solr 6.x cluster, but haven’t done that for our 8.7 clusters running on Java 11. I was going to check how long ours have been up, but every Solr server was restarted 3 days ago to fix the log4j vulnerability. wunder

When will solr 8.11.1 become available?

Thanks, Rebecca

Re: Solr Cloud Node re-join issue

On 12/13/21 8:53 AM, Scott wrote: I guess my questions are: - Why does Solr use more than 16g ? - Why isn't swapped memory released ? Solr is a Java program, and it is Java that manages the memory. If the process is going significantly beyond the 16GB max heap that has been configured, and sw

Re: When will solr 8.11.1 become available?

You can follow the release on the dev@ mailing list, see https://lists.apache.org/list.html?d...@solr.apache.org There will be a first release candidate soon-ish, and depending on voting outcome there may be more RCs during the week and then finally an official release. Jan > 13. des. 2021 kl

Re: Log4j vulnerability- Solr4 - urgent pls

For Solr 4, you don’t need this Please see other replies Sent from my iPhone > On Dec 12, 2021, at 12:50 AM, Reej Nayagam wrote: > > Thanks for the reply. > > *REgards,* > *Reej* > > >> On Sun, Dec 12, 2021 at 12:28 PM Rahul Goswami >> wrote: >> >> In case of solr4 which uses log4j-1.2.1

Re: When will solr 8.11.1 become available?

On 12/13/21 12:53 PM, Tang, Rebecca wrote: Thanks, Rebecca It is impossible to give you an accurate prediction for the release date of Solr 8.11.1. Yesterday, the developer who designated themselves the release manager for 8.11.1 said on the Solr dev list that they would be creating the f

Re: When will solr 8.11.1 become available?

> It is impossible to give you an accurate prediction for the release date of > Solr 8.11.1. It sounds like it’s safe to say that the release will be “on the order of at least a week from now” would be safe, right? That might be all the accuracy that someone needs.

Re: When will solr 8.11.1 become available?

On 12/13/2021 4:12 PM, Andy Lester wrote: It is impossible to give you an accurate prediction for the release date of Solr 8.11.1. It sounds like it’s safe to say that the release will be “on the order of at least a week from now” would be safe, right? That might be all the accuracy that som