Solr SSL errors with Alfresco

mparsons — Tue, 09 Jul 2024 13:32:27 GMT

I have Solr running and configured to use the ssl-repo-client.keystore and ssl-repo-client.truststore files that I generated in PKCS12 format. I'm able to access the Solr web page successfully, however errors are being logged. I've attached my configurations and error logs below. Has anybody run into this issue? My search services are (obviously) not working. I was able to check the files using keytool and they seem to be fine. Is there some configuration that I'm missing?

solr.in.cmd:
set SOLR_SSL_KEY_STORE=D:\alfresco-content-services\solr\solrhome\keystore\ssl-repo-client.keystore
set SOLR_SSL_KEY_STORE_PASSWORD=mypassword
set SOLR_SSL_KEY_STORE_TYPE=PKCS12
set SOLR_SSL_TRUST_STORE=D:\alfresco-content-services\solr\solrhome\keystore\ssl-repo-client.truststore
set SOLR_SSL_TRUST_STORE_PASSWORD=mypassword
set SOLR_SSL_TRUST_STORE_TYPE=PKCS12
set SOLR_SSL_NEED_CLIENT_AUTH=true
set SOLR_SSL_WANT_CLIENT_AUTH=true

solrcore.properties:
alfresco.encryption.ssl.keystore.type=PKCS12
alfresco.encryption.ssl.keystore.provider=SUN
alfresco.encryption.ssl.keystore.location=D:/alfresco-content-services/solr/solrhome/keystore/ssl-repo-client.keystore
alfresco.encryption.ssl.keystore.passwordFileLocation=
alfresco.encryption.ssl.truststore.type=PKCS12
alfresco.encryption.ssl.truststore.provider=SUN
alfresco.encryption.ssl.truststore.location=D:/alfresco-content-services/solr/solrhome/keystore/ssl-repo-client.truststore
alfresco.encryption.ssl.truststore.passwordFileLocation=

solr.log errors:
2024-07-09 12:57:30.000 WARN (org.alfresco.solr.AlfrescoCoreAdminHandler@4beddc56_Worker-27) [ ] o.a.e.AlfrescoKeyStoreImpl No aliases were specified for ssl-keystore keystore
2024-07-09 12:57:30.001 WARN (org.alfresco.solr.AlfrescoCoreAdminHandler@4beddc56_Worker-4) [ ] o.a.e.AlfrescoKeyStoreImpl No aliases were specified for ssl-keystore keystore
2024-07-09 12:57:30.004 WARN (org.alfresco.solr.AlfrescoCoreAdminHandler@4beddc56_Worker-7) [ ] o.a.e.AlfrescoKeyStoreImpl No aliases were specified for ssl-keystore keystore
2024-07-09 12:57:30.008 WARN (org.alfresco.solr.AlfrescoCoreAdminHandler@4beddc56_Worker-9) [ ] o.a.e.AlfrescoKeyStoreImpl No aliases were specified for ssl-keystore keystore
2024-07-09 12:57:30.016 ERROR (org.alfresco.solr.AlfrescoCoreAdminHandler@4beddc56_Worker-4) [ ] o.a.s.t.AbstractTracker [alfresco / ACL@1455619773 / IT #1720529850000] Tracking failure. See the stacktrace below for further details.
org.alfresco.error.AlfrescoRuntimeException: 0609331747 Unable to create SSL context
at org.alfresco.encryption.ssl.AuthSSLProtocolSocketFactory.getSSLContext(AuthSSLProtocolSocketFactory.java:130)
at org.alfresco.encryption.ssl.AuthSSLProtocolSocketFactory.createSocket(AuthSSLProtocolSocketFactory.java:165)
at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707)
at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361)
at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:387)
at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
at org.alfresco.httpclient.RequestHeadersHttpClient.executeMethod(RequestHeadersHttpClient.java:90)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323)
at org.alfresco.httpclient.RequestHeadersHttpClient.executeMethod(RequestHeadersHttpClient.java:75)
at org.alfresco.httpclient.AbstractHttpClient.executeMethod(AbstractHttpClient.java:135)
at org.alfresco.httpclient.AbstractHttpClient.sendRemoteRequest(AbstractHttpClient.java:111)
at org.alfresco.httpclient.HttpClientFactory$HttpsClient.sendRequest(HttpClientFactory.java:474)
at org.alfresco.solr.client.SOLRAPIClient.callRepository(SOLRAPIClient.java:1595)
at org.alfresco.solr.client.SOLRAPIClient.getAclChangeSets(SOLRAPIClient.java:187)
at org.alfresco.solr.tracker.AclTracker.checkRepoAndIndexConsistency(AclTracker.java:416)
at org.alfresco.solr.tracker.AclTracker.trackRepository(AclTracker.java:397)
at org.alfresco.solr.tracker.AclTracker.doTrack(AclTracker.java:160)
at org.alfresco.solr.tracker.AbstractTracker.track(AbstractTracker.java:231)
at org.alfresco.solr.tracker.ActivatableTracker.track(ActivatableTracker.java:97)
at org.alfresco.solr.tracker.TrackerJob.execute(TrackerJob.java:60)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)
Caused by: org.alfresco.error.AlfrescoRuntimeException: 0609331746 Unable to create key manager
at org.alfresco.encryption.AlfrescoKeyStoreImpl.createKeyManagers(AlfrescoKeyStoreImpl.java:337)
at org.alfresco.encryption.ssl.AuthSSLProtocolSocketFactory.createSSLContext(AuthSSLProtocolSocketFactory.java:103)
at org.alfresco.encryption.ssl.AuthSSLProtocolSocketFactory.getSSLContext(AuthSSLProtocolSocketFactory.java:124)
... 22 more
Caused by: java.security.UnrecoverableKeyException: Get Key failed: null
at java.base/sun.security.pkcs12.PKCS12KeyStore.engineGetKey(PKCS12KeyStore.java:450)
at java.base/sun.security.util.KeyStoreDelegator.engineGetKey(KeyStoreDelegator.java:91)
at java.base/java.security.KeyStore.getKey(KeyStore.java:1050)
at java.base/sun.security.ssl.SunX509KeyManagerImpl.<init>(SunX509KeyManagerImpl.java:141)
at java.base/sun.security.ssl.KeyManagerFactoryImpl$SunX509.engineInit(KeyManagerFactoryImpl.java:64)
at java.base/javax.net.ssl.KeyManagerFactory.init(KeyManagerFactory.java:275)
at org.alfresco.encryption.AlfrescoKeyStoreImpl.createKeyManagers(AlfrescoKeyStoreImpl.java:332)
... 24 more
Caused by: java.lang.NullPointerException

topic Solr SSL errors with Alfresco in Alfresco Forum

Solr SSL errors with Alfresco