Hi,
So far it is still not able to work with the files from Solr 7.4.0. I found
that the jetty-ssl.xml is the file with the difference that causes the
issue.
This is the jetty-ssl.xml from Solr 7.3.1:
<Set name="KeyStorePath"><Property name="solr.jetty.keystore"
default="./etc/solr-ssl.keystore.jks"/></Set>
<Set name="KeyStorePassword"><Env name="SOLR_SSL_KEY_STORE_PASSWORD"
default="secret"/></Set>
<Set name="TrustStorePath"><Property name="solr.jetty.truststore"
default="./etc/solr-ssl.keystore.jks"/></Set>
<Set name="TrustStorePassword"><Env name="SOLR_SSL_TRUST_STORE_PASSWORD"
default="secret"/></Set>
<Set name="NeedClientAuth"><Property name="solr.jetty.ssl.needClientAuth"
default="false"/></Set>
<Set name="WantClientAuth"><Property name="solr.jetty.ssl.wantClientAuth"
default="false"/></Set>
<Set name="KeyStoreType"><Property name="solr.jetty.keystore.type"
default="JKS"/></Set>
This is the jetty-ssl.xml from Solr 7.4.0:
<Call class="org.apache.solr.util.configuration.SSLConfigurationsFactory"
name="current">
<Get name="keyStorePassword" id="keyStorePassword"/>
<Get name="trustStorePassword" id="trustStorePassword"/>
</Call>
<Set name="KeyStorePath"><Property name="solr.jetty.keystore"
default="./etc/solr-ssl.keystore.jks"/></Set>
<Set name="KeyStorePassword"><Ref refid="keyStorePassword"/></Set>
<Set name="TrustStorePath"><Property name="solr.jetty.truststore"
default="./etc/solr-ssl.keystore.jks"/></Set>
<Set name="TrustStorePassword"><Ref refid="trustStorePassword"/></Set>
<Set name="NeedClientAuth"><Property name="solr.jetty.ssl.needClientAuth"
default="false"/></Set>
<Set name="WantClientAuth"><Property name="solr.jetty.ssl.wantClientAuth"
default="false"/></Set>
<Set name="KeyStoreType"><Property name="solr.jetty.keystore.type"
default="JKS"/></Set>
I have set up Solr from downloading the package from
http://www-eu.apache.org/dist/lucene/solr/7.4.0/.
I started Solr with the following command:
bin\solr.cmd start -cloud -p 8983 -s solrMain\node1 -m 8g -z
"localhost:2181,localhost:2182,localhost:2183" -Dsolr.ltr.enabled=true
pause
bin\solr.cmd start -cloud -p 8984 -s solrMain\node2 -m 8g -z
"localhost:2181,localhost:2182,localhost:2183" -Dsolr.ltr.enabled=true
pause
Below is the portion of the solr.in that is enabled:
REM Enables HTTPS. It is implictly true if you set SOLR_SSL_KEY_STORE. Use
this config
REM to enable https module with custom jetty configuration.
set SOLR_SSL_ENABLED=false
REM Uncomment to set SSL-related system properties
REM Be sure to update the paths to the correct keystore for your environment
set SOLR_SSL_KEY_STORE=etc/solr-ssl.keystore.jks
set SOLR_SSL_KEY_STORE_PASSWORD=secret
set SOLR_SSL_TRUST_STORE=etc/solr-ssl.keystore.jks
set SOLR_SSL_TRUST_STORE_PASSWORD=secret
REM Require clients to authenticate
set SOLR_SSL_NEED_CLIENT_AUTH=false
REM Enable clients to authenticate (but not require)
set SOLR_SSL_WANT_CLIENT_AUTH=false
REM SSL Certificates contain host/ip "peer name" information that is
validated by default. Setting
REM this to false can be useful to disable these checks when re-using a
certificate on many hosts
set SOLR_SSL_CHECK_PEER_NAME=true
REM Override Key/Trust Store types if necessary
set SOLR_SSL_KEY_STORE_TYPE=JKS
set SOLR_SSL_TRUST_STORE_TYPE=JKS
Regards,
Edwin
On Fri, 10 Aug 2018 at 23:04, Jan Høydahl <jan....@cominvent.com> wrote:
> Hi,
>
> Did you solve your issue? SSL should work ootb in 7.4, the class that your
> error says is not found exists, so there must be some setup issues.
> How did you install Solr, how do you start it, what is the content of your
> solr.in <http://solr.in/>.sh etc
>
> --
> Jan Høydahl, search solution architect
> Cominvent AS - www.cominvent.com
>
> > 11. jul. 2018 kl. 17:23 skrev Zheng Lin Edwin Yeo <edwinye...@gmail.com
> >:
> >
> > Hi,
> >
> > I found that if we replace the following files with the copy from Solr
> > 7.3.1, the SSL can work
> > - jetty.xml
> > - jetty-http.xml
> > - jetty-https.xml
> > - jetty-ssl.xml
> >
> > But the copies that comes with Solr 7.4.0 are not working.
> >
> > I found there are some differences in the file, but not sure if there are
> > other changes required, or if there are bugs in the copies in Solr 7.4.0?
> >
> > Regards,
> > Edwin
> >
> > On 4 July 2018 at 11:20, Zheng Lin Edwin Yeo <edwinye...@gmail.com>
> wrote:
> >
> >> Hi,
> >>
> >> Would like to check, if there are any major changes in the way the SSL
> >> works for Solr 7.4.0?
> >>
> >> I have tried to set up with the same method that I used for Solr 7.3.1,
> >> but after setting it up, the Solr is unable to load.
> >>
> >> Below is the error message that I get.
> >>
> >> Caused by: java.security.PrivilegedActionException:
> >> java.lang.ClassNotFoundExcep
> >> tion: org.apache.solr.util.configuration.SSLConfigurationsFactory
> >> at java.security.AccessController.doPrivileged(Native Method)
> >> at org.eclipse.jetty.xml.XmlConfiguration.main(
> >> XmlConfiguration.java:150
> >> 8)
> >> ... 7 more
> >> Caused by: java.lang.ClassNotFoundException: org.apache.solr.util.
> >> configuration.
> >> SSLConfigurationsFactory
> >> at java.net.URLClassLoader.findClass(Unknown Source)
> >> at java.lang.ClassLoader.loadClass(Unknown Source)
> >> at java.lang.ClassLoader.loadClass(Unknown Source)
> >> at org.eclipse.jetty.util.Loader.loadClass(Loader.java:65)
> >> at org.eclipse.jetty.xml.XmlConfiguration$
> >> JettyXmlConfiguration.call(Xml
> >> Configuration.java:784)
> >> at org.eclipse.jetty.xml.XmlConfiguration$
> >> JettyXmlConfiguration.configur
> >> e(XmlConfiguration.java:469)
> >> at org.eclipse.jetty.xml.XmlConfiguration$
> >> JettyXmlConfiguration.configur
> >> e(XmlConfiguration.java:410)
> >> at org.eclipse.jetty.xml.XmlConfiguration.configure(
> >> XmlConfiguration.jav
> >> a:308)
> >> at org.eclipse.jetty.xml.XmlConfiguration$1.run(
> >> XmlConfiguration.java:15
> >> 55)
> >> at org.eclipse.jetty.xml.XmlConfiguration$1.run(
> >> XmlConfiguration.java:15
> >> 09)
> >> ... 9 more
> >> java.lang.reflect.InvocationTargetException
> >> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> >> at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
> >> at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
> Source)
> >> at java.lang.reflect.Method.invoke(Unknown Source)
> >> at org.eclipse.jetty.start.Main.invokeMain(Main.java:220)
> >> at org.eclipse.jetty.start.Main.start(Main.java:486)
> >> at org.eclipse.jetty.start.Main.main(Main.java:77)
> >> Caused by: java.security.PrivilegedActionException:
> >> java.lang.ClassNotFoundExcep
> >> tion: org.apache.solr.util.configuration.SSLConfigurationsFactory
> >> at java.security.AccessController.doPrivileged(Native Method)
> >> at org.eclipse.jetty.xml.XmlConfiguration.main(
> >> XmlConfiguration.java:150
> >> 8)
> >> ... 7 more
> >> Caused by: java.lang.ClassNotFoundException: org.apache.solr.util.
> >> configuration.
> >> SSLConfigurationsFactory
> >> at java.net.URLClassLoader.findClass(Unknown Source)
> >> at java.lang.ClassLoader.loadClass(Unknown Source)
> >> at java.lang.ClassLoader.loadClass(Unknown Source)
> >> at org.eclipse.jetty.util.Loader.loadClass(Loader.java:65)
> >> at org.eclipse.jetty.xml.XmlConfiguration$
> >> JettyXmlConfiguration.call(Xml
> >> Configuration.java:784)
> >> at org.eclipse.jetty.xml.XmlConfiguration$
> >> JettyXmlConfiguration.configur
> >> e(XmlConfiguration.java:469)
> >> at org.eclipse.jetty.xml.XmlConfiguration$
> >> JettyXmlConfiguration.configur
> >> e(XmlConfiguration.java:410)
> >> at org.eclipse.jetty.xml.XmlConfiguration.configure(
> >> XmlConfiguration.jav
> >> a:308)
> >> at org.eclipse.jetty.xml.XmlConfiguration$1.run(
> >> XmlConfiguration.java:15
> >> 55)
> >> at org.eclipse.jetty.xml.XmlConfiguration$1.run(
> >> XmlConfiguration.java:15
> >> 09)
> >> ... 9 more
> >>
> >> Usage: java -jar $JETTY_HOME/start.jar [options] [properties] [configs]
> >> java -jar $JETTY_HOME/start.jar --help # for more information
> >>
> >>
> >> Regards,
> >> Edwin
> >>
>
>
