RE: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-23 Thread Kelly Rusk
cause it already exists in the store! Thanks, Kelly -Original Message- From: Kelly Rusk [mailto:kelly.r...@rackspace.com] Sent: Sunday, April 22, 2018 8:51 PM To: solr-user@lucene.apache.org; solr-user@lucene.apache.org Subject: Re: Solr 6.6.2 Master/Slave SSL Replication Error Makes p

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Kelly Rusk
Makes perfect sense! Should I use the key tool to import the Certs? If so, do you have an example you prefer or should I just pull from the docs? Regards, Kelly _ From: Shawn Heisey Sent: Sunday, April 22, 2018 8:40 PM Subject: Re: Solr 6.6.2 Master/Slave SSL

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Shawn Heisey
On 4/22/2018 6:27 PM, Kelly Rusk wrote: Thanks for the assistance. The Master Server has a self-signed Cert with its machine name, and the Slave has a self-signed Cert with its machine name. They have identical configurations, and I created a keystore per server. Should I import the self-signe

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Kelly Rusk
keystore? Or are you stating that I need to copy the keystore over to the Slave instead of having the one I created? Regards, Kelly _ From: Shawn Heisey Sent: Sunday, April 22, 2018 7:56 PM Subject: Re: Solr 6.6.2 Master/Slave SSL Replication Error To: On 4/22/2018 4

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Shawn Heisey
On 4/22/2018 4:40 PM, Kelly Rusk wrote: I already have a key store/trust store and my settings are as follows: set SOLR_SSL_KEY_STORE=etc/solr-ssl.keystore.jks set SOLR_SSL_KEY_STORE_PASSWORD=secret set SOLR_SSL_TRUST_STORE=etc/solr-ssl.keystore.jks set SOLR_SSL_TRUST_STORE_PASSWORD=secret REM R

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Kelly Rusk
recommending? Regards, Kelly _ From: Chris Hostetter Sent: Sunday, April 22, 2018 5:43 PM Subject: Re: Solr 6.6.2 Master/Slave SSL Replication Error To: You need to configure Solr to use a "truststore" that contains the certificate you want it to trust. With a

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Chris Hostetter
lr/guide/6_6/enabling-ssl.html : Date: Sat, 21 Apr 2018 14:40:08 -0700 (MST) : From: kway : Reply-To: solr-user@lucene.apache.org : To: solr-user@lucene.apache.org : Subject: Re: Solr 6.6.2 Master/Slave SSL Replication Error : : ... looking at this line, I am wondering if this is an issue beca

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-21 Thread kway
... looking at this line, I am wondering if this is an issue because I am using a Self-Signed Certificate: Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to fin

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-21 Thread kway
Thanks Shawn, Here is what I get from the logs: 2018-04-20 18:03:57.805 WARN (indexFetcher-19-thread-1) [ x:XP1Prod_core_index_rebuild] o.a.s.h.IndexFetcher Master at: https://mastercomputername:8983/solr/XP1Prod_core_index_rebuild is not available. Index fetch failed by exception: org.apache.

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-21 Thread kway
Thanks Shawn, Here is what I get from the logs: 2018-04-20 18:03:57.805 WARN (indexFetcher-19-thread-1) [ x:XP1Prod_core_index_rebuild] o.a.s.h.IndexFetcher Master at: https://mastercomputername:8983/solr/XP1Prod_core_index_rebuild is not available. Index fetch failed by exception: org.apache.

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-21 Thread Shawn Heisey
On 4/21/2018 10:24 AM, kway wrote: However, I can't get replication to work when using SSL/HTTPS. It throws IO Communication errors as it can’t resolve the https connection to a localhost certificate on the Master. The error is as follows: Master at: https://mastercomputername:8983/solr/core_ind