I think this is covered in the ref guide https://solr.apache.org/guide/8_11/major-changes-in-solr-8.html#ssl-support-with-http2
In order to support SSL over HTTP/2 connections, Solr uses ALPN. Java 8 does not include an implementation of ALPN, therefore Solr will start with HTTP/1 only when SSL is enabled and Java 8 is in use. On Tue, Aug 16, 2022 at 11:37 PM Victoria Stuart (VictoriasJourney.com) < m...@victoriasjourney.com> wrote: > Some additional information. > > [victoria@vps1234 ~]$ sudo lsof -i -P -n | grep LISTEN | grep solr > > java 1355 solr 158u IPv6 2046156989 0t0 TCP 127.0.0.1:7983 > (LISTEN) > java 1355 solr 175u IPv6 2046024279 0t0 TCP *:8983 (LISTEN) > > [victoria@vps1234 ~]$ sudo systemctl status httpd > > ● httpd.service - The Apache HTTP Server > Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor > preset: disabled) > Active: active (running) since Tue 2022-08-16 20:45:10 PDT; 46min ago > ... > > [victoria@vps1234 ~]$ sudo systemctl status sshd > > ● sshd.service - OpenSSH server daemon > Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled; vendor > preset: enabled) > Active: active (running) since Tue 2022-08-16 20:45:10 PDT; 46min ago > ... > > > ------------------------------------------------------------------------------- > > https://my_web_site.com:8983/ >> Unable to connect ... > > > > ============================================================================== > ----- Original Message(s): ----- > Date: 2022 Aug 16 (Tue) 21:17 > From: "Victoria Stuart (VictoriasJourney.com)" <m...@victoriasjourney.com> > To: users@solr.apache.org > Cc: m...@victoriasjourney.com > Subject: Cannot SSL-secure Solr 8 on Java 1.8 JRE (HTTP/1 , HTTP/2 issue) > > Hello. Per > > https://solr.apache.org/guide/8_11/solr-system-requirements.html > https://solr.apache.org/guide/8_11/enabling-ssl.html > > I am trying to take Solr 8.11.1 to production on a CentOS 7 cloud VPS. > > Solr 8.11.1 is working fine (SSL-secured; authentication via > security.json; etc.) on my Arch Linux local host. > > I installed Solr 8.11.1 via solr.in.sh, and tried it with Java JRE 1.8 > (details below) and java-11-openjdk.x86_64. > > java-11-openjdk.x86_64 ## > /usr/lib/jvm/java-11-openjdk-11.0.16.0.8-1.el7_9.x86_64/bin/java > java-1.8.0-openjdk.x86_64 ## > /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.342.b07-1.el7_9.x86_64/jre/bin/java > > Solr worked with the Java 11 OpenJDK, but I was unable to SSL-secure it. > > Solr also works on the Java 1.8 JRE, but complains > > HTTP/2 + SSL is not support in Java 8. > Configure Solr with HTTP/1.1 + SSL > > How can I resolve this issue? > > > ------------------------------------------------------------------------------- > > [victoria@vps1234 ~]$ date > Tue Aug 16 20:55:23 PDT 2022 > > [victoria@vps1234 ~]$ cat /etc/centos-release > CentOS Linux release 7.9.2009 (Core) > > [victoria@vps1234 ~]$ uname -a > Linux vps1234.inmotionhosting.com 3.10.0 #1 SMP Tue Jan 25 12:49:12 MSK > 2022 x86_64 x86_64 x86_64 GNU/Linux > > [victoria@vps1234 ~]$ which java > /usr/bin/java > > [victoria@vps1234 ~]$ java -version > > openjdk version "1.8.0_342" > OpenJDK Runtime Environment (build 1.8.0_342-b07) > OpenJDK 64-Bit Server VM (build 25.342-b07, mixed mode) > > [victoria@vps1234 ~]$ echo $JAVA_HOME > /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.342.b07-1.el7_9.x86_64/jre > > [victoria@vps1234 ~]$ echo $SOLR_JAVA_HOME > /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.342.b07-1.el7_9.x86_64/jre/ > > [victoria@vps1234 ~]$ sudo service solr start > > HTTP/2 + SSL is not support in Java 8. > Configure Solr with HTTP/1.1 + SSL > > Waiting up to 30 seconds to see Solr running on port 8983 [\] > Started Solr server on port 8983 (pid=1355). Happy searching! > > [victoria@vps1234 ~]$ sudo service solr status > > HTTP/2 + SSL is not support in Java 8. > Configure Solr with HTTP/1.1 + SSL > > Found 1 Solr nodes: > > Solr process 1355 running on port 8983 > INFO - 2022-08-16 19:55:03.830; > org.apache.solr.util.configuration.SSLConfigurations; Setting > javax.net.ssl.keyStorePassword > INFO - 2022-08-16 19:55:03.834; > org.apache.solr.util.configuration.SSLConfigurations; Setting > javax.net.ssl.trustStorePassword > { > "solr_home":"/home/victoria/apps/solr-8.11.1/server/solr", > "version":"8.11.1 0b002b11819df70783e83ef36b42ed1223c14b50 - janhoy - > 2021-12-14 13:50:55", > "startTime":"2022-08-17T03:47:52.140Z", > "uptime":"0 days, 0 hours, 7 minutes, 13 seconds", > "memory":"162.5 MB (%31.7) of 512 MB"} > > [victoria@vps1234 ~]$ > > > ============================================================================== >
