topic Problem after replacing certificate in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/problem-after-replacing-certificate/m-p/258891#M212021 <HTML><HEAD></HEAD><BODY><SPAN>hi,</SPAN><BR /><SPAN>i've installed 4.2d alfresco with windows setup(but the same with 4.2c), and no problem with original certificate and SOLR.</SPAN><BR /><BR /><SPAN>After that,i've changed original auth certificate(s) with a Digicert signed certificate(s) with this procedure:</SPAN><BR /><SPAN>- Creation of ssl.keystore that contains signed ssl.repo and Digicert root certificate</SPAN><BR /><SPAN>- Creation of ssl.truststore with Digicert Root certificate</SPAN><BR /><SPAN>- Copy ssl.truststore and ssl.keystore in %ALFRESCO_HOME%/alf_data/keystore</SPAN><BR /><SPAN>- Change ssl-keystore-passwords.properties and ssl-truststore-passwords.properties in %ALFRESCO_HOME%/alf_data/keystore</SPAN><BR /><BR /><SPAN>- Creation of ssl.repo.client.keystore that contains signed ssl.repo.client and Digicert root certificate</SPAN><BR /><SPAN>- Copy ssl.truststore and ssl.repo.client.keystore in each %SOLR_HOME%/../conf directory</SPAN><BR /><SPAN>- Change ssl-keystore-passwords.properties and ssl-truststore-passwords.properties in each %SOLR_HOME%/../conf directory</SPAN><BR /><SPAN>- Change server.xml configuration connector with new pw</SPAN><BR /><SPAN>- Change tomcat-users.xml to reflect the new DN</SPAN><BR /><BR /><SPAN>- Restart</SPAN><BR /><BR /><SPAN>At this point i can not view new users in people search and not even new activities </SPAN><BR /><BR /><SPAN>In solr.log i can see this problem:</SPAN><BR /><SPAN>18:04:30,075 ERROR [org.quartz.core.ErrorLogger] Job (Solr.CoreTracker-archive threw an exception.</SPAN><BR /><SPAN>org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: org.alfresco.error.AlfrescoRuntimeException: 11130621 GetModelsDiff return status is 403]</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.quartz.core.JobRunShell.run(JobRunShell.java:227)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:563)</SPAN><BR /><SPAN>Caused by: org.alfresco.error.AlfrescoRuntimeException: 11130621 GetModelsDiff return status is 403</SPAN><BR /><SPAN>.</SPAN><BR /><SPAN>.</SPAN><BR /><SPAN>.</SPAN><BR /><BR /><BR /><SPAN>No effect rebuilding solr index.</SPAN><BR /><BR /><BR /><SPAN>Regards,</SPAN><BR /><SPAN>Frank</SPAN></BODY></HTML> Thu, 13 Dec 2012 18:07:13 GMT frank_l 2012-12-13T18:07:13Z Problem after replacing certificate https://connect.hyland.com/t5/alfresco-archive/problem-after-replacing-certificate/m-p/258891#M212021 hi,i've installed 4.2d alfresco with windows setup(but the same with 4.2c), and no problem with original certificate and SOLR.After that,i've changed original auth certificate(s) with a Digicert signed certificate(s) with this procedure:- Creation of ssl.keystore that contains signed ssl.repo and Di Thu, 13 Dec 2012 18:07:13 GMT https://connect.hyland.com/t5/alfresco-archive/problem-after-replacing-certificate/m-p/258891#M212021 frank_l 2012-12-13T18:07:13Z Re: Problem after replacing certificate https://connect.hyland.com/t5/alfresco-archive/problem-after-replacing-certificate/m-p/258892#M212022 <HTML><HEAD></HEAD><BODY><SPAN>Update:</SPAN><BR /><SPAN>disabling the https usage in SOLR seems to solve the issue.</SPAN><BR /><BR /><SPAN>Any suggest about the source of the problem.</SPAN><BR /><BR /><SPAN>Regards</SPAN></BODY></HTML> Sun, 16 Dec 2012 19:53:18 GMT https://connect.hyland.com/t5/alfresco-archive/problem-after-replacing-certificate/m-p/258892#M212022 frank_l 2012-12-16T19:53:18Z Re: Problem after replacing certificate https://connect.hyland.com/t5/alfresco-archive/problem-after-replacing-certificate/m-p/258893#M212023 <HTML><HEAD></HEAD><BODY><SPAN>Hi,</SPAN><BR /><BR /><SPAN>I have not really a solution for your problem, but to clear things up:</SPAN><BR /><BR /><SPAN>403 is forbidden.</SPAN><BR /><BR /><SPAN>In this case, solr or alfresco are not allowed to speak with each other. Most likely its because of not matching truststores/keystores.</SPAN><BR /><BR /><SPAN>In consequence, if you disable https, no authentication is performed at all, so a 403 can not be thrown.</SPAN><BR /><BR /><SPAN>Regards</SPAN></BODY></HTML> Mon, 31 Dec 2012 11:17:46 GMT https://connect.hyland.com/t5/alfresco-archive/problem-after-replacing-certificate/m-p/258893#M212023 itnovum 2012-12-31T11:17:46Z