RE: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-23 Thread Kelly Rusk
se it already exists in the store! Thanks, Kelly -Original Message- From: Kelly Rusk [mailto:kelly.r...@rackspace.com] Sent: Sunday, April 22, 2018 8:51 PM To: solr-user@lucene.apache.org; solr-user@lucene.apache.org Subject: Re: Solr 6.6.2 Master/Slave SSL Replication Error Makes perfect

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Kelly Rusk
6.6.2 Master/Slave SSL Replication Error To: <solr-user@lucene.apache.org> On 4/22/2018 6:27 PM, Kelly Rusk wrote: > Thanks for the assistance. The Master Server has a self-signed Cert with its > machine name, and the Slave has a self-signed Cert with its machine name. >

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Shawn Heisey
On 4/22/2018 6:27 PM, Kelly Rusk wrote: Thanks for the assistance. The Master Server has a self-signed Cert with its machine name, and the Slave has a self-signed Cert with its machine name. They have identical configurations, and I created a keystore per server. Should I import the

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Kelly Rusk
keystore? Or are you stating that I need to copy the keystore over to the Slave instead of having the one I created? Regards, Kelly _ From: Shawn Heisey <apa...@elyograg.org> Sent: Sunday, April 22, 2018 7:56 PM Subject: Re: Solr 6.6.2 Master/Slave SSL Replication

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Shawn Heisey
On 4/22/2018 4:40 PM, Kelly Rusk wrote: I already have a key store/trust store and my settings are as follows: set SOLR_SSL_KEY_STORE=etc/solr-ssl.keystore.jks set SOLR_SSL_KEY_STORE_PASSWORD=secret set SOLR_SSL_TRUST_STORE=etc/solr-ssl.keystore.jks set SOLR_SSL_TRUST_STORE_PASSWORD=secret REM

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Kelly Rusk
are recommending? Regards, Kelly _ From: Chris Hostetter <hossman_luc...@fucit.org> Sent: Sunday, April 22, 2018 5:43 PM Subject: Re: Solr 6.6.2 Master/Slave SSL Replication Error To: <solr-user@lucene.apache.org> You need to configure Solr to use a "truststo

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Chris Hostetter
lr/guide/6_6/enabling-ssl.html : Date: Sat, 21 Apr 2018 14:40:08 -0700 (MST) : From: kway <kelly.r...@rackspace.com> : Reply-To: solr-user@lucene.apache.org : To: solr-user@lucene.apache.org : Subject: Re: Solr 6.6.2 Master/Slave SSL Replication Error : : ... looking at this line, I am wonder

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-21 Thread kway
... looking at this line, I am wondering if this is an issue because I am using a Self-Signed Certificate: Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-21 Thread kway
Thanks Shawn, Here is what I get from the logs: 2018-04-20 18:03:57.805 WARN (indexFetcher-19-thread-1) [ x:XP1Prod_core_index_rebuild] o.a.s.h.IndexFetcher Master at: https://mastercomputername:8983/solr/XP1Prod_core_index_rebuild is not available. Index fetch failed by exception:

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-21 Thread kway
Thanks Shawn, Here is what I get from the logs: 2018-04-20 18:03:57.805 WARN (indexFetcher-19-thread-1) [ x:XP1Prod_core_index_rebuild] o.a.s.h.IndexFetcher Master at: https://mastercomputername:8983/solr/XP1Prod_core_index_rebuild is not available. Index fetch failed by exception:

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-21 Thread Shawn Heisey
On 4/21/2018 10:24 AM, kway wrote: However, I can't get replication to work when using SSL/HTTPS. It throws IO Communication errors as it can’t resolve the https connection to a localhost certificate on the Master. The error is as follows: Master at:

Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-21 Thread kway
I need to use SSL in my Master/Slave Solr 6.6.2 environment. I had created a localhost SSL Cert on the Master (works on the Master because it’s local), but this won’t work for the Slave which has replication based on the IP of the Master server. I then changed it to a self-signed cert that uses