I don't know why this script worked on CentOS, but it did.
Also I managed to make it work with uncommenting following two lines:
SOLR_SSL_TRUST_STORE=/opt/solr/server/etc/solr-ssl.keystore.jks
SOLR_SSL_TRUST_STORE_PASSWORD=[password]
I don't know where did I find that these need to be uncommented only if
it's self-signed certificate, now it looks like they have to be uncommented
in both cases.
On Tue, May 9, 2017 at 4:40 PM, Steve Rowe <sar...@gmail.com> wrote:
> Hi,
>
> AFAICT the Solr 5.5.4 install_solr_service.sh doesn’t support Centos
> (support was added in 6.3: SOLR-9475). How did you make it work?
>
> I’m guessing there are permissions problems in your installation
> directory, such that the account being used to start Solr doesn’t have
> execute and/or read permission somewhere under /opt/solr-5.5.4/.
>
> The install script sets up permissions like this:
>
> -----
> chown -R root: "$SOLR_INSTALL_DIR"
> find "$SOLR_INSTALL_DIR" -type d -print0 | xargs -0 chmod 0755
> find "$SOLR_INSTALL_DIR" -type f -print0 | xargs -0 chmod 0644
> chmod -R 0755 "$SOLR_INSTALL_DIR/bin”
> -----
>
> --
> Steve
> www.lucidworks.com
>
> > On May 9, 2017, at 4:17 AM, Sebastjanas <sebastja...@vaisovas.lt> wrote:
> >
> > Hello,
> >
> > I installed 5.5.4 on Centos to /opt/solr. Also I installed init script
> > using install_solr_service.sh. I've imported bought certificate to
> keystore
> > and now trying to start it up with SSL, using following settings in
> > /etc/default/solr.in.sh:
> >
> > SOLR_SSL_ENABLED=true
> > SOLR_SSL_KEY_STORE=etc/solr-ssl.keystore.jks
> > SOLR_SSL_KEY_STORE_PASSWORD=[password]
> > #SOLR_SSL_TRUST_STORE=etc/keystore.jks
> > #SOLR_SSL_TRUST_STORE_PASSWORD=[password]
> > SOLR_SSL_NEED_CLIENT_AUTH=false
> > SOLR_SSL_WANT_CLIENT_AUTH=false
> >
> > But it doesn't start with following error:
> >
> > 1629 WARN (main) [ ] o.e.j.u.c.AbstractLifeCycle FAILED
> > SslContextFactory@564fabc8(etc/solr-ssl.keystore.jks,):
> > java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> > java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> > at java.io.FileInputStream.open0(Native Method)
> > at java.io.FileInputStream.open(FileInputStream.java:195)
> > at java.io.FileInputStream.<init>(FileInputStream.java:138)
> > at org.eclipse.jetty.util.resource.FileResource.
> getInputStream(FileResource.java:290)
> > at org.eclipse.jetty.util.security.CertificateUtils.
> getKeyStore(CertificateUtils.java:43)
> > at org.eclipse.jetty.util.ssl.SslContextFactory.loadTrustStore(
> SslContextFactory.java:884)
> > at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(
> SslContextFactory.java:274)
> > at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> > at org.eclipse.jetty.util.component.ContainerLifeCycle.
> start(ContainerLifeCycle.java:132)
> > at org.eclipse.jetty.util.component.ContainerLifeCycle.
> doStart(ContainerLifeCycle.java:114)
> > at org.eclipse.jetty.server.SslConnectionFactory.doStart(
> SslConnectionFactory.java:64)
> > at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> > at org.eclipse.jetty.util.component.ContainerLifeCycle.
> start(ContainerLifeCycle.java:132)
> > at org.eclipse.jetty.util.component.ContainerLifeCycle.
> doStart(ContainerLifeCycle.java:114)
> > at org.eclipse.jetty.server.AbstractConnector.doStart(
> AbstractConnector.java:256)
> > at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(
> AbstractNetworkConnector.java:81)
> > at org.eclipse.jetty.server.ServerConnector.doStart(
> ServerConnector.java:236)
> > at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> > at org.eclipse.jetty.server.Server.doStart(Server.java:366)
> > at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> > at org.eclipse.jetty.xml.XmlConfiguration$1.run(
> XmlConfiguration.java:1255)
> > at java.security.AccessController.doPrivileged(Native Method)
> > at org.eclipse.jetty.xml.XmlConfiguration.main(
> XmlConfiguration.java:1174)
> > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> > at sun.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
> > at sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
> > at java.lang.reflect.Method.invoke(Method.java:498)
> > at org.eclipse.jetty.start.Main.invokeMain(Main.java:321)
> > at org.eclipse.jetty.start.Main.start(Main.java:817)
> > at org.eclipse.jetty.start.Main.main(Main.java:112)
> > 1631 INFO (coreLoadExecutor-6-thread-1) [ ] o.a.s.c.SolrConfig
> > Adding specified lib dirs to ClassLoader
> > 1634 WARN (main) [ ] o.e.j.u.c.AbstractLifeCycle FAILED
> > SslConnectionFactory@74fe5c40{SSL-http/1.1}:
> > java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> > java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> > at java.io.FileInputStream.open0(Native Method)
> > at java.io.FileInputStream.open(FileInputStream.java:195)
> > at java.io.FileInputStream.<init>(FileInputStream.java:138)
> > at org.eclipse.jetty.util.resource.FileResource.
> getInputStream(FileResource.java:290)
> > at org.eclipse.jetty.util.security.CertificateUtils.
> getKeyStore(CertificateUtils.java:43)
> > at org.eclipse.jetty.util.ssl.SslContextFactory.loadTrustStore(
> SslContextFactory.java:884)
> > at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(
> SslContextFactory.java:274)
> > at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> > at org.eclipse.jetty.util.component.ContainerLifeCycle.
> start(ContainerLifeCycle.java:132)
> > at org.eclipse.jetty.util.component.ContainerLifeCycle.
> doStart(ContainerLifeCycle.java:114)
> > at org.eclipse.jetty.server.SslConnectionFactory.doStart(
> SslConnectionFactory.java:64)
> > at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> > at org.eclipse.jetty.util.component.ContainerLifeCycle.
> start(ContainerLifeCycle.java:132)
> > at org.eclipse.jetty.util.component.ContainerLifeCycle.
> doStart(ContainerLifeCycle.java:114)
> > at org.eclipse.jetty.server.AbstractConnector.doStart(
> AbstractConnector.java:256)
> > at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(
> AbstractNetworkConnector.java:81)
> > at org.eclipse.jetty.server.ServerConnector.doStart(
> ServerConnector.java:236)
> > at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> > at org.eclipse.jetty.server.Server.doStart(Server.java:366)
> > at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> > at org.eclipse.jetty.xml.XmlConfiguration$1.run(
> XmlConfiguration.java:1255)
> > at java.security.AccessController.doPrivileged(Native Method)
> > at org.eclipse.jetty.xml.XmlConfiguration.main(
> XmlConfiguration.java:1174)
> > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> > at sun.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
> > at sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
> > at java.lang.reflect.Method.invoke(Method.java:498)
> > at org.eclipse.jetty.start.Main.invokeMain(Main.java:321)
> > at org.eclipse.jetty.start.Main.start(Main.java:817)
> > at org.eclipse.jetty.start.Main.main(Main.java:112)
> > 1636 WARN (main) [ ] o.e.j.u.c.AbstractLifeCycle FAILED
> > ServerConnector@3febb011{SSL-http/1.1}{0.0.0.0:8983}:
> > java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> > java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> > at java.io.FileInputStream.open0(Native Method)
> > at java.io.FileInputStream.open(FileInputStream.java:195)
> > at java.io.FileInputStream.<init>(FileInputStream.java:138)
> > at org.eclipse.jetty.util.resource.FileResource.
> getInputStream(FileResource.java:290)
> > at org.eclipse.jetty.util.security.CertificateUtils.
> getKeyStore(CertificateUtils.java:43)
> > at org.eclipse.jetty.util.ssl.SslContextFactory.loadTrustStore(
> SslContextFactory.java:884)
> > at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(
> SslContextFactory.java:274)
> > at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> > at org.eclipse.jetty.util.component.ContainerLifeCycle.
> start(ContainerLifeCycle.java:132)
> > at org.eclipse.jetty.util.component.ContainerLifeCycle.
> doStart(ContainerLifeCycle.java:114)
> > at org.eclipse.jetty.server.SslConnectionFactory.doStart(
> SslConnectionFactory.java:64)
> > at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> > at org.eclipse.jetty.util.component.ContainerLifeCycle.
> start(ContainerLifeCycle.java:132)
> > at org.eclipse.jetty.util.component.ContainerLifeCycle.
> doStart(ContainerLifeCycle.java:114)
> > at org.eclipse.jetty.server.AbstractConnector.doStart(
> AbstractConnector.java:256)
> > at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(
> AbstractNetworkConnector.java:81)
> > at org.eclipse.jetty.server.ServerConnector.doStart(
> ServerConnector.java:236)
> > at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> > at org.eclipse.jetty.server.Server.doStart(Server.java:366)
> > at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> > at org.eclipse.jetty.xml.XmlConfiguration$1.run(
> XmlConfiguration.java:1255)
> > at java.security.AccessController.doPrivileged(Native Method)
> > at org.eclipse.jetty.xml.XmlConfiguration.main(
> XmlConfiguration.java:1174)
> > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> > at sun.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
> > at sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
> > at java.lang.reflect.Method.invoke(Method.java:498)
> > at org.eclipse.jetty.start.Main.invokeMain(Main.java:321)
> > at org.eclipse.jetty.start.Main.start(Main.java:817)
> > at org.eclipse.jetty.start.Main.main(Main.java:112)
> >
> > I tried to use:
> > SOLR_SSL_KEY_STORE=/opt/solr-5.5.4/server/etc/solr-ssl.keystore.jks, but
> > I'm still getting the same error. Can't find where the issue could be.
> Any
> > ideas?
> >
> > --
> > Pagarbiai Sebastjanas.
>
>
--
Pagarbiai Sebastjanas.
