[
https://issues.apache.org/jira/browse/SOLR-6758?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14294054#comment-14294054
]
Steve Rowe commented on SOLR-6758:
----------------------------------
The process to set this up has been simplified in Solr 5 - see the Solr
Reference Guide page [Enabling
SSL|https://cwiki.apache.org/confluence/display/solr/Enabling+SSL] for a
description. While Solr 5 hasn't been released yet, you can test with the
latest release candidate - see [this
thread|http://markmail.org/message/gejj5647aasldoun] for download links.
Here's a direct link to the first release candidate (and most recent as of this
writing - there will be at least one more RC before the final release):
http://people.apache.org/~anshum/staging_area/lucene-solr-5.0.0-RC1-rev1654615/solr/solr-5.0.0.tgz
> Solr node to node communication errors w/ SSL + client auth
> -----------------------------------------------------------
>
> Key: SOLR-6758
> URL: https://issues.apache.org/jira/browse/SOLR-6758
> Project: Solr
> Issue Type: Bug
> Reporter: liuqibj
>
> Enable two solr servers SSL w/ client auth(JSSE) and then change solr.xml to
> use 8443 port and change zookeeper to use https instead of http.
> then starting the two solr server and found these errors. Any suggestions?
> ERROR - 2014-11-19 12:55:31.125; org.apache.solr.common.SolrException;
> null:org.apache.solr.common.SolrException:
> org.apache.solr.client.solrj.SolrServerException: IOException occured when
> talking to server at: https://9.12.11.9:8443/solr/collection2_shard1_replica2
> at
> org.apache.solr.handler.component.SearchHandler.handleRequestBody(SearchHandler.java:308)
> at
> org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:135)
> at org.apache.solr.core.SolrCore.execute(SolrCore.java:1916)
> at
> org.apache.solr.servlet.SolrDispatchFilter.execute(SolrDispatchFilter.java:780)
> at
> org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:427)
> at
> org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:217)
> at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
> at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
> at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)
> at
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)
> at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
> at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> at
> org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:950)
> at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
> at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408)
> at
> org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1040)
> at
> org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:607)
> at
> org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:314)
> at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1156)
> at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:626)
> at
> org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
> at java.lang.Thread.run(Thread.java:804)
> Caused by: org.apache.solr.client.solrj.SolrServerException: IOException
> occured when talking to server at:
> https://9.12.11.9::8443/solr/collection2_shard1_replica2
> at
> org.apache.solr.client.solrj.impl.HttpSolrServer.request(HttpSolrServer.java:507)
> at
> org.apache.solr.client.solrj.impl.HttpSolrServer.request(HttpSolrServer.java:199)
> at
> org.apache.solr.handler.component.HttpShardHandler$1.call(HttpShardHandler.java:156)
> at
> org.apache.solr.handler.component.HttpShardHandler$1.call(HttpShardHandler.java:118)
> at java.util.concurrent.FutureTask.run(FutureTask.java:273)
> at
> java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:482)
> at java.util.concurrent.FutureTask.run(FutureTask.java:273)
> at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1156)
> at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:626)
> ... 1 more
> Caused by: javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.j: PKIX
> path building failed: java.security.cert.CertPathBuilderException:
> PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is:
> java.security.cert.CertPathValidatorException: The certificate issued
> by CN=testing, L=lt, ST=mass, OU=test, O=IBM test, C=ZQ is not trusted;
> internal cause is:
> java.security.cert.CertPathValidatorException: Certificate chaining
> error
> at com.ibm.jsse2.j.a(j.java:36)
> at com.ibm.jsse2.qc.a(qc.java:199)
> at com.ibm.jsse2.ab.a(ab.java:171)
> at com.ibm.jsse2.ab.a(ab.java:180)
> at com.ibm.jsse2.bb.a(bb.java:346)
> at com.ibm.jsse2.bb.a(bb.java:559)
> at com.ibm.jsse2.ab.r(ab.java:554)
> at com.ibm.jsse2.ab.a(ab.java:325)
> at com.ibm.jsse2.qc.a(qc.java:617)
> at com.ibm.jsse2.qc.h(qc.java:103)
> at com.ibm.jsse2.qc.a(qc.java:166)
> at com.ibm.jsse2.qc.startHandshake(qc.java:649)
> at
> org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:533)
> at
> org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:401)
> at
> org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:178)
> at
> org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:304)
> at
> org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:610)
> at
> org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:445)
> at
> org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:863)
> at
> org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)
> at
> org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:106)
> at
> org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:57)
> at
> org.apache.solr.client.solrj.impl.HttpSolrServer.request(HttpSolrServer.java:395)
> ... 9 more
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org
For additional commands, e-mail: dev-h...@lucene.apache.org
