RE: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-23 Thread Kelly Rusk
cause it already exists in the store! Thanks, Kelly -Original Message- From: Kelly Rusk [mailto:kelly.r...@rackspace.com] Sent: Sunday, April 22, 2018 8:51 PM To: solr-user@lucene.apache.org; solr-user@lucene.apache.org Subject: Re: Solr 6.6.2 Master/Slave SSL Replication Error Makes p

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Kelly Rusk
Makes perfect sense! Should I use the key tool to import the Certs? If so, do you have an example you prefer or should I just pull from the docs? Regards, Kelly _ From: Shawn Heisey Sent: Sunday, April 22, 2018 8:40 PM Subject: Re: Solr 6.6.2 Master/Slave SSL

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Shawn Heisey
On 4/22/2018 6:27 PM, Kelly Rusk wrote: Thanks for the assistance. The Master Server has a self-signed Cert with its machine name, and the Slave has a self-signed Cert with its machine name. They have identical configurations, and I created a keystore per server. Should I import the self-signe

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Kelly Rusk
keystore? Or are you stating that I need to copy the keystore over to the Slave instead of having the one I created? Regards, Kelly _ From: Shawn Heisey Sent: Sunday, April 22, 2018 7:56 PM Subject: Re: Solr 6.6.2 Master/Slave SSL Replication Error To: On 4/22/2018 4

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Shawn Heisey
On 4/22/2018 4:40 PM, Kelly Rusk wrote: I already have a key store/trust store and my settings are as follows: set SOLR_SSL_KEY_STORE=etc/solr-ssl.keystore.jks set SOLR_SSL_KEY_STORE_PASSWORD=secret set SOLR_SSL_TRUST_STORE=etc/solr-ssl.keystore.jks set SOLR_SSL_TRUST_STORE_PASSWORD=secret REM R

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Kelly Rusk
recommending? Regards, Kelly _ From: Chris Hostetter Sent: Sunday, April 22, 2018 5:43 PM Subject: Re: Solr 6.6.2 Master/Slave SSL Replication Error To: You need to configure Solr to use a "truststore" that contains the certificate you want it to trust. With a

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-22 Thread Chris Hostetter
lr/guide/6_6/enabling-ssl.html : Date: Sat, 21 Apr 2018 14:40:08 -0700 (MST) : From: kway : Reply-To: solr-user@lucene.apache.org : To: solr-user@lucene.apache.org : Subject: Re: Solr 6.6.2 Master/Slave SSL Replication Error : : ... looking at this line, I am wondering if this is an issue beca

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-21 Thread kway
... looking at this line, I am wondering if this is an issue because I am using a Self-Signed Certificate: Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to fin

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-21 Thread kway
Thanks Shawn, Here is what I get from the logs: 2018-04-20 18:03:57.805 WARN (indexFetcher-19-thread-1) [ x:XP1Prod_core_index_rebuild] o.a.s.h.IndexFetcher Master at: https://mastercomputername:8983/solr/XP1Prod_core_index_rebuild is not available. Index fetch failed by exception: org.apache.

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-21 Thread kway
Thanks Shawn, Here is what I get from the logs: 2018-04-20 18:03:57.805 WARN (indexFetcher-19-thread-1) [ x:XP1Prod_core_index_rebuild] o.a.s.h.IndexFetcher Master at: https://mastercomputername:8983/solr/XP1Prod_core_index_rebuild is not available. Index fetch failed by exception: org.apache.

Re: Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-21 Thread Shawn Heisey
On 4/21/2018 10:24 AM, kway wrote: However, I can't get replication to work when using SSL/HTTPS. It throws IO Communication errors as it can’t resolve the https connection to a localhost certificate on the Master. The error is as follows: Master at: https://mastercomputername:8983/solr/core_ind

Solr 6.6.2 Master/Slave SSL Replication Error

2018-04-21 Thread kway
I need to use SSL in my Master/Slave Solr 6.6.2 environment. I had created a localhost SSL Cert on the Master (works on the Master because it’s local), but this won’t work for the Slave which has replication based on the IP of the Master server. I then changed it to a self-signed cert that uses the