[
https://issues.apache.org/jira/browse/SOLR-16161?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
John Thorhauer updated SOLR-16161:
----------------------------------
Description:
We are running Solr in a FIPS enabled linux environment. After upgrading Java
to 17.0.2 we now receive the following error while starting Solr:
2022-04-20 11:40:03.700 ERROR (main) [ ] o.a.s.c.SolrCore null =>
org.apache.solr.common.SolrException: Error instantiating shardHandlerFactory
class [HttpShardHandlerFactory]: java.lang.IllegalStateException:
/opt/solr-8.11.1/server/NONE is not a valid keystore
at
org.apache.solr.handler.component.ShardHandlerFactory.newInstance(ShardHandlerFactory.java:56)
.....
Caused by: java.lang.RuntimeException: java.lang.IllegalStateException:
/opt/solr-8.11.1/server/NONE is not a valid keystore
at
org.apache.solr.client.solrj.impl.Http2SolrClient.createHttpClient(Http2SolrClient.java:234)
~[solr-solrj-8.11.1.jar:8.11.1 0b002b11819df70783e83ef36b42ed1223c14b50 -
janhoy - 2021-12-14 13:50:57]
We noticed that adding the following allows the server to start properly:
SOLR_OPTS="$SOLR_OPTS -Dcom.redhat.fips=false"
However, adding the following does NOT have any effect:
SOLR_OPTS="$SOLR_OPTS -Dcom.redhat.fips.plainKeySupport=true"
was:
We are running Solr in a FIPS enabled linux environment. After upgrading Java
to 17.0.2 we now receive the following error while starting Solr:
2022-04-20 11:40:03.700 ERROR (main) [ ] o.a.s.c.SolrCore null =>
org.apache.solr.common.SolrException: Error instantiating shardHandlerFactory
class [HttpShardHandlerFactory]: java.lang.IllegalStateException:
/opt/solr-8.11.1/server/NONE is not a valid keystore
at
org.apache.solr.handler.component.ShardHandlerFactory.newInstance(ShardHandlerFactory.java:56)
.....
Caused by: java.lang.RuntimeException: java.lang.IllegalStateException:
/opt/solr-8.11.1/server/NONE is not a valid keystore
at
org.apache.solr.client.solrj.impl.Http2SolrClient.createHttpClient(Http2SolrClient.java:234)
~[solr-solrj-8.11.1.jar:8.11.1 0b002b11819df70783e83ef36b42ed1223c14b50 -
janhoy - 2021-12-14 13:50:57]
> FIPS and Java 17.0.2 error on startup - server/NONE is not a valid keystore
> ---------------------------------------------------------------------------
>
> Key: SOLR-16161
> URL: https://issues.apache.org/jira/browse/SOLR-16161
> Project: Solr
> Issue Type: Bug
> Security Level: Public(Default Security Level. Issues are Public)
> Components: security
> Affects Versions: 8.11.1
> Environment: Solr 8.11.1
> java -version
> openjdk version "17.0.2" 2022-01-18 LTS
> OpenJDK Runtime Environment 21.9 (build 17.0.2+8-LTS)
> OpenJDK 64-Bit Server VM 21.9 (build 17.0.2+8-LTS, mixed mode, sharing)
>
> cat /etc/centos-release
> CentOS Stream release 8
> Reporter: John Thorhauer
> Priority: Major
>
> We are running Solr in a FIPS enabled linux environment. After upgrading
> Java to 17.0.2 we now receive the following error while starting Solr:
>
> 2022-04-20 11:40:03.700 ERROR (main) [ ] o.a.s.c.SolrCore null =>
> org.apache.solr.common.SolrException: Error instantiating shardHandlerFactory
> class [HttpShardHandlerFactory]: java.lang.IllegalStateException:
> /opt/solr-8.11.1/server/NONE is not a valid keystore
> at
> org.apache.solr.handler.component.ShardHandlerFactory.newInstance(ShardHandlerFactory.java:56)
> .....
> Caused by: java.lang.RuntimeException: java.lang.IllegalStateException:
> /opt/solr-8.11.1/server/NONE is not a valid keystore
> at
> org.apache.solr.client.solrj.impl.Http2SolrClient.createHttpClient(Http2SolrClient.java:234)
> ~[solr-solrj-8.11.1.jar:8.11.1 0b002b11819df70783e83ef36b42ed1223c14b50 -
> janhoy - 2021-12-14 13:50:57]
>
> We noticed that adding the following allows the server to start properly:
> SOLR_OPTS="$SOLR_OPTS -Dcom.redhat.fips=false"
>
> However, adding the following does NOT have any effect:
> SOLR_OPTS="$SOLR_OPTS -Dcom.redhat.fips.plainKeySupport=true"
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org
