Uploaded image for project: 'Solr'
  1. Solr
  2. SOLR-16161

FIPS and Java 17.0.2 error on startup - server/NONE is not a valid keystore

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Not A Problem
    • 8.11.1
    • None
    • security
    • None

    Description

      We are running Solr in a FIPS enabled linux environment.  After upgrading Java to 17.0.2 we now receive the following error while starting Solr:

       

      2022-04-20 11:40:03.700 ERROR (main) [   ] o.a.s.c.SolrCore null => org.apache.solr.common.SolrException: Error instantiating shardHandlerFactory class [HttpShardHandlerFactory]: java.lang.IllegalStateException: /opt/solr-8.11.1/server/NONE is not a valid keystore
              at org.apache.solr.handler.component.ShardHandlerFactory.newInstance(ShardHandlerFactory.java:56)

      .....

      Caused by: java.lang.RuntimeException: java.lang.IllegalStateException: /opt/solr-8.11.1/server/NONE is not a valid keystore
              at org.apache.solr.client.solrj.impl.Http2SolrClient.createHttpClient(Http2SolrClient.java:234) ~[solr-solrj-8.11.1.jar:8.11.1 0b002b11819df70783e83ef36b42ed1223c14b50 - janhoy - 2021-12-14 13:50:57] 

       

      We noticed that adding the following allows the server to start properly:

      SOLR_OPTS="$SOLR_OPTS -Dcom.redhat.fips=false"

       

      However, adding the following does NOT have any effect:

      SOLR_OPTS="$SOLR_OPTS -Dcom.redhat.fips.plainKeySupport=true"

      Attachments

        Activity

          People

            krisden Kevin Risden
            jthor John Thorhauer
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: