topic Re: SOLR configurations for SSL communication? in Alfresco Archive

SOLR configurations for SSL communication?

srinivasr — Mon, 25 Apr 2016 19:30:42 GMT

Hi,I have configured SSL in server.xml <Connector port="8443" URIEncoding="UTF-8" protocol="org.apache.coyote.http11.Http11Protocol" SSLEnabled="true" maxThreads="150" scheme="https" keyAlias="test"

Re: SOLR configurations for SSL communication?

hardik1512 — Tue, 26 Apr 2016 06:02:14 GMT

Try regenerating the certificates by running generate_keystores.bat(Windows) OR generate_keystores.sh(linux) file.

Re: SOLR configurations for SSL communication?

srinivasr — Wed, 27 Apr 2016 15:05:12 GMT

Thanks Hardik for your reply. The generate-keystores.sh is an older version that is bundled with 5.1. There is a jira ticket on that issue (https://issues.alfresco.com/jira/browse/MNT-16139).

Is there any other way to install the certificates?

We have our own certificate issued by godaddy, how do we install that certificate in solr4?

I have updated the server.xml with the certificate and I can launch alfresco through https but solr4 doesn't recognize as it uses its own keystores and truststores. The challenge is i am not able to find a good document on how to embed the certificates in solr4.

Re: SOLR configurations for SSL communication?

srinivasr — Wed, 27 Apr 2016 22:15:43 GMT

I have tried all the options available but no luck. how does generate-keystores solves the issue?

My last attempt was this:

1) Updated the certificate info in server.xml (mycompany.jks) - Can login to alfresco using https
2) Updated alfresco-global.properties with the below:


encryption.ssl.keystore.location=${dir.keystore}/ssl.keystore
encryption.ssl.keystore.type=JCEKS
encryption.ssl.keystore.keyMetaData.location=${dir.keystore}
encryption.ssl.keystore.provider=SunJCE

encryption.ssl.truststore.location =${dir.keystore}/ssl.truststore
encryption.ssl.truststore.type =JCEKS
encryption.ssl.truststore.keyMetaData.location=${dir.keystore}
encryption.ssl.truststore.provider=SunJCE
‍‍‍‍‍‍‍‍‍‍‍

Here are the errors after restarting the server (solr search doesn't work).


INFORMATION: Server startup in 73660 ms
2016-04-27 23:24:13,292  ERROR [solr.tracker.AbstractTracker] [SolrTrackerScheduler_Worker-1] Model tracking failed
 javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
        at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)
        at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
        at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
        at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandsh
‍‍‍‍‍‍‍‍‍‍

Re: SOLR configurations for SSL communication?

geovanny_campov — Mon, 12 Dec 2016 20:41:20 GMT

Hello srinivasr,

I have bought my SSL certificate in Godaddy and I don't get mi certificate working.

Please, can you provide me some information about it? What I have to do? What files I have to modify in order to get my certificate working?

Thanks in advance for your help.

Regards,

Geova C.