On 2022-03-25 03:43 +0000, Sam Lee wrote: > The solution is to add the appropriate ZooKeeper Java properties. Notice > that these are exactly the same properties needed by standalone > ZooKeeper's 'zkServer.sh' and 'zkCli.sh' to connect to ZooKeeper via > SSL [1] [2]. Add the following to bin/solr.in.sh: > > --8<---------------cut here---------------start------------->8--- > SOLR_OPTS="$SOLR_OPTS > -Dzookeeper.client.secure=true > -Dzookeeper.clientCnxnSocket=org.apache.zookeeper.ClientCnxnSocketNetty > -Dzookeeper.ssl.keyStore.location=/path/to/zk-keystore.jks > -Dzookeeper.ssl.keyStore.password=thepassword > -Dzookeeper.ssl.trustStore.location=/path/to/zk-truststore.jks > -Dzookeeper.ssl.trustStore.password=thepassword" > --8<---------------cut here---------------end--------------->8---
Actually, it's more appropriate to add these ZooKeeper properties to the "SOLR_ZK_CREDS_AND_ACLS" variable in bin/solr.in.sh instead of adding them directly to "SOLR_OPTS". This is to enable the "bin/solr zk ..." command to connect to ZooKeeper correctly. (Solr version 8.11, external ZooKeeper version 3.6.3).
