Hi Steve, Yes, I have set that in solr.in.cmd.
Regards, Edwin On 22 April 2017 at 01:51, Steve Rowe <sar...@gmail.com> wrote: > Edwin, > > Did you set the required keystore/truststore/password system properties? > See the example at <https://cwiki.apache.org/confluence/display/solr/ > Enabling+SSL#EnablingSSL-IndexadocumentusingCloudSolrClient> > > -- > Steve > www.lucidworks.com > > > On Apr 21, 2017, at 1:44 PM, Zheng Lin Edwin Yeo <edwinye...@gmail.com> > wrote: > > > > Thank you Steve. > > > > I have managed to set up the SSL, and the query via https is working now. > > > > However, I am getting this error when I tried to do indexing using > SolrJ. I > > have already changed the URL to pass using https. > > > > What could be the reason that causes this? > > > > javax.net.ssl.SSLHandshakeException: sun.security.validator. > > ValidatorException: > > PKIX path building failed: sun.security.provider.certpath. > > SunCertPathBuilderExce > > ption: unable to find valid certification path to requested target > > at sun.security.ssl.Alerts.getSSLException(Unknown Source) > > at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source) > > at sun.security.ssl.Handshaker.fatalSE(Unknown Source) > > at sun.security.ssl.Handshaker.fatalSE(Unknown Source) > > at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown > > Source) > > at sun.security.ssl.ClientHandshaker.processMessage(Unknown > Source) > > at sun.security.ssl.Handshaker.processLoop(Unknown Source) > > at sun.security.ssl.Handshaker.process_record(Unknown Source) > > at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source) > > at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown > > Source > > ) > > at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) > > at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) > > at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown > > Source) > > at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnec > > tion.connect > > (Unknown Source) > > at sun.net.www.protocol.http.HttpURLConnection. > getInputStream0(Unknown > > S > > ource) > > at sun.net.www.protocol.http.HttpURLConnection. > getInputStream(Unknown > > So > > urce) > > at sun.net.www.protocol.https.HttpsURLConnectionImpl. > > getInputStream(Unkn > > own Source) > > at org.apache.solr.util.SimplePostTool.doHttpGet( > > SimplePostTool.java:1702) > > at org.apache.solr.util.SimplePostTool.main(SimplePostTool.j > > ava:256) > > Caused by: sun.security.validator.ValidatorException: PKIX path building > > failed: > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > find > > vali > > d certification path to requested target > > at sun.security.validator.PKIXValidator.doBuild(Unknown Source) > > at sun.security.validator.PKIXValidator.engineValidate(Unknown > > Source) > > at sun.security.validator.Validator.validate(Unknown Source) > > at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source) > > at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown > > Source) > > at sun.security.ssl.X509TrustManagerImpl. > checkServerTrusted(Unknown > > Sour > > ce) > > ... 15 more > > Caused by: sun.security.provider.certpath.SunCertPathBuilderException: > > unable to > > find valid certification path to requested target > > at sun.security.provider.certpath.SunCertPathBuilder. > build(Unknown > > Sourc > > e) > > at sun.security.provider.certpath.SunCertPathBuilder. > > engineBuild(Unknown > > Source) > > at java.security.cert.CertPathBuilder.build(Unknown Source) > > ... 21 more > > javax.net.ssl.SSLHandshakeException: sun.security.validator. > > ValidatorException: > > PKIX path building failed: sun.security.provider.certpath. > > SunCertPathBuilderExce > > ption: unable to find valid certification path to requested target > > at sun.security.ssl.Alerts.getSSLException(Unknown Source) > > at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source) > > at sun.security.ssl.Handshaker.fatalSE(Unknown Source) > > at sun.security.ssl.Handshaker.fatalSE(Unknown Source) > > at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown > > Source) > > at sun.security.ssl.ClientHandshaker.processMessage(Unknown > Source) > > at sun.security.ssl.Handshaker.processLoop(Unknown Source) > > at sun.security.ssl.Handshaker.process_record(Unknown Source) > > at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source) > > at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown > > Source > > ) > > at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) > > at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) > > at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown > > Source) > > at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnec > > tion.connect > > (Unknown Source) > > at sun.net.www.protocol.http.HttpURLConnection. > getInputStream0(Unknown > > S > > ource) > > at sun.net.www.protocol.http.HttpURLConnection. > getInputStream(Unknown > > So > > urce) > > at sun.net.www.protocol.https.HttpsURLConnectionImpl. > > getInputStream(Unkn > > own Source) > > at org.apache.solr.util.SimplePostTool.doHttpGet( > > SimplePostTool.java:1702) > > at org.apache.solr.util.SimplePostTool.main(SimplePostTool.j > > ava:256) > > Caused by: sun.security.validator.ValidatorException: PKIX path building > > failed: > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > find > > vali > > d certification path to requested target > > at sun.security.validator.PKIXValidator.doBuild(Unknown Source) > > at sun.security.validator.PKIXValidator.engineValidate(Unknown > > Source) > > at sun.security.validator.Validator.validate(Unknown Source) > > at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source) > > at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown > > Source) > > at sun.security.ssl.X509TrustManagerImpl. > checkServerTrusted(Unknown > > Sour > > ce) > > ... 15 more > > Caused by: sun.security.provider.certpath.SunCertPathBuilderException: > > unable to > > find valid certification path to requested target > > at sun.security.provider.certpath.SunCertPathBuilder. > build(Unknown > > Sourc > > e) > > at sun.security.provider.certpath.SunCertPathBuilder. > > engineBuild(Unknown > > Source) > > at java.security.cert.CertPathBuilder.build(Unknown Source) > > ... 21 more > > > > > > Regards, > > Edwin > > > > On 21 April 2017 at 22:02, Steve Rowe <sar...@gmail.com> wrote: > > > >> Hi Edwin, > >> > >> See <https://cwiki.apache.org/confluence/display/solr/Enabling+SSL>. > >> > >> -- > >> Steve > >> www.lucidworks.com > >> > >>> On Apr 21, 2017, at 12:03 AM, Zheng Lin Edwin Yeo < > edwinye...@gmail.com> > >> wrote: > >>> > >>> Hi, > >>> > >>> I would like to find out, how can we allow Solr to accept secure > >>> connections via https? > >>> > >>> I am using SolrCloud on Solr 6.4.2 > >>> > >>> Regards, > >>> Edwin > >> > >> > >
