Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Hyland Connect
- Enterprise Platforms
- Alfresco
- Alfresco Archive
- SOLR not tracking after custom keystores generated
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
SOLR not tracking after custom keystores generated
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-24-2016 07:55 PM
Hello,
I am running Alfresco 5.0.0 (d r99759-b2) community edition.
Alfresco is installed with standard wizard.
Once initial deployment finished, http in tomcat is set to disabled and verified alfresco and solr are running without issues as they should.
Used generate_keystore.bat with changed to CN:
set CERTIFICATE_HOME=%USERPROFILE%
@rem The repository server certificate subject name, as specified in tomcat\conf\tomcat-users.xml with roles="repository"
set REPO_CERT_DNAME=CN=server1, OU=Unknown, O=Unknown, L=Unknown, ST=US, C=US
@rem The SOLR client certificate subject name, as specified in tomcat\conf\tomcat-users.xml with roles="repoclient"
set SOLR_CLIENT_CERT_DNAME=CN=server1, OU=Unknown, O=Unknown, L=Unknown, ST=US, C=US
Once keystores generated, I created a certificate sign request and signed the certificates with my private domain CA. Alias for the certificate are kept ssl.repo & ssl.repo.client.
Once started I am seeing following errors in solr.log (with debug on):
2016-02-24 18:38:44,724 DEBUG [org.apache.commons.httpclient.methods.EntityEnclosingMethod] Request body sent
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "HTTP/1.1 401 Unauthorized[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "HTTP/1.1 401 Unauthorized[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "Server: Apache-Coyote/1.1[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "Content-Type: text/html;charset=utf-8[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "Content-Language: en[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "Content-Length: 1037[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "Date: Thu, 25 Feb 2016 00:38:45 GMT[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [org.apache.commons.httpclient.HttpMethodDirector] Authorization required
2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.HttpMethodDirector] Authentication challenge(s) not found
2016-02-24 18:38:45,848 DEBUG [httpclient.wire.content] << "<html><head><title>Apache Tomcat/7.0.59 - Error report</title><style><!–H1 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;} H2 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:16px;} H3 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:14px;} BODY {font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} B {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;} P {font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px;}A {color : black;}A.name {color : black;}HR {color : #525D76;}–></style> </head><body><h1>HTTP Status 401 - No client certificate chain in this request</h1><HR size="1" noshade="noshade"><p><b>type</b> Status report</p><p><b>message</b> <u>No client certificate chain in this request</u></p><p><b>description</b> <u>This request requires HTTP authentication.</u></p><HR size="1" noshade="noshade"><h3>Apache Tomcat/7.0.59</h3><"
2016-02-24 18:38:45,848 DEBUG [httpclient.wire.content] << "/body></html>"
2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.HttpMethodBase] Resorting to protocol version default close connection policy
2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.HttpMethodBase] Should NOT close connection, using HTTP/1.1
2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.HttpConnection] Releasing connection back to connection manager.
2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.MultiThreadedHttpConnectionManager] Freeing connection, hostConfig=HostConfiguration[host=https://server1]
2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.util.IdleConnectionHandler] Adding connection at: 1456360725848
2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.MultiThreadedHttpConnectionManager] Notifying no-one, there are no waiting threads
2016-02-24 18:38:45,848 ERROR [org.alfresco.solr.tracker.AbstractTracker] Model tracking failed
org.alfresco.error.AlfrescoRuntimeException: 01240000 GetModelsDiff return status is 401
at org.alfresco.solr.client.SOLRAPIClient.getModelsDiff(SOLRAPIClient.java:1091)
at org.alfresco.solr.tracker.ModelTracker.trackModelsImpl(ModelTracker.java:249)
at org.alfresco.solr.tracker.ModelTracker.trackModels(ModelTracker.java:207)
at org.alfresco.solr.tracker.ModelTracker.ensureFirstModelSync(ModelTracker.java:229)
at org.alfresco.solr.tracker.CoreWatcherJob.registerForCore(CoreWatcherJob.java:131)
at org.alfresco.solr.tracker.CoreWatcherJob.execute(CoreWatcherJob.java:74)
at org.quartz.core.JobRunShell.run(JobRunShell.java:216)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:563)
I am running Alfresco 5.0.0 (d r99759-b2) community edition.
Alfresco is installed with standard wizard.
Once initial deployment finished, http in tomcat is set to disabled and verified alfresco and solr are running without issues as they should.
Used generate_keystore.bat with changed to CN:
set CERTIFICATE_HOME=%USERPROFILE%
@rem The repository server certificate subject name, as specified in tomcat\conf\tomcat-users.xml with roles="repository"
set REPO_CERT_DNAME=CN=server1, OU=Unknown, O=Unknown, L=Unknown, ST=US, C=US
@rem The SOLR client certificate subject name, as specified in tomcat\conf\tomcat-users.xml with roles="repoclient"
set SOLR_CLIENT_CERT_DNAME=CN=server1, OU=Unknown, O=Unknown, L=Unknown, ST=US, C=US
Once keystores generated, I created a certificate sign request and signed the certificates with my private domain CA. Alias for the certificate are kept ssl.repo & ssl.repo.client.
Once started I am seeing following errors in solr.log (with debug on):
2016-02-24 18:38:44,724 DEBUG [org.apache.commons.httpclient.methods.EntityEnclosingMethod] Request body sent
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "HTTP/1.1 401 Unauthorized[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "HTTP/1.1 401 Unauthorized[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "Server: Apache-Coyote/1.1[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "Content-Type: text/html;charset=utf-8[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "Content-Language: en[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "Content-Length: 1037[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "Date: Thu, 25 Feb 2016 00:38:45 GMT[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] << "[\r][\n]"
2016-02-24 18:38:45,833 DEBUG [org.apache.commons.httpclient.HttpMethodDirector] Authorization required
2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.HttpMethodDirector] Authentication challenge(s) not found
2016-02-24 18:38:45,848 DEBUG [httpclient.wire.content] << "<html><head><title>Apache Tomcat/7.0.59 - Error report</title><style><!–H1 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;} H2 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:16px;} H3 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:14px;} BODY {font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} B {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;} P {font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px;}A {color : black;}A.name {color : black;}HR {color : #525D76;}–></style> </head><body><h1>HTTP Status 401 - No client certificate chain in this request</h1><HR size="1" noshade="noshade"><p><b>type</b> Status report</p><p><b>message</b> <u>No client certificate chain in this request</u></p><p><b>description</b> <u>This request requires HTTP authentication.</u></p><HR size="1" noshade="noshade"><h3>Apache Tomcat/7.0.59</h3><"
2016-02-24 18:38:45,848 DEBUG [httpclient.wire.content] << "/body></html>"
2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.HttpMethodBase] Resorting to protocol version default close connection policy
2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.HttpMethodBase] Should NOT close connection, using HTTP/1.1
2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.HttpConnection] Releasing connection back to connection manager.
2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.MultiThreadedHttpConnectionManager] Freeing connection, hostConfig=HostConfiguration[host=https://server1]
2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.util.IdleConnectionHandler] Adding connection at: 1456360725848
2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.MultiThreadedHttpConnectionManager] Notifying no-one, there are no waiting threads
2016-02-24 18:38:45,848 ERROR [org.alfresco.solr.tracker.AbstractTracker] Model tracking failed
org.alfresco.error.AlfrescoRuntimeException: 01240000 GetModelsDiff return status is 401
at org.alfresco.solr.client.SOLRAPIClient.getModelsDiff(SOLRAPIClient.java:1091)
at org.alfresco.solr.tracker.ModelTracker.trackModelsImpl(ModelTracker.java:249)
at org.alfresco.solr.tracker.ModelTracker.trackModels(ModelTracker.java:207)
at org.alfresco.solr.tracker.ModelTracker.ensureFirstModelSync(ModelTracker.java:229)
at org.alfresco.solr.tracker.CoreWatcherJob.registerForCore(CoreWatcherJob.java:131)
at org.alfresco.solr.tracker.CoreWatcherJob.execute(CoreWatcherJob.java:74)
at org.quartz.core.JobRunShell.run(JobRunShell.java:216)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:563)
Labels:
- Labels:
-
Archive
2 REPLIES 2
Not applicable
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-05-2016 06:03 AM
Hi, are you using the same certificate in the Tomcat server configuration?
Peter
Peter
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-01-2018 12:49 AM
Did you fix this issue? Please share the solution.
Related Content
- Alfresco 23.1 Community - keystore error: Keystores are invalid in Alfresco Forum
- Summarization of textual content in Alfresco repository with Amazon Bedrock in Alfresco Blog
- Error Keystores are invalid when upgrade from 4.1.1 to 5.2.4 in Alfresco Forum
- New install of Alfresco Search Services 2 TLS is returning handshake error in Alfresco Forum
- Speed up Community Alfresco with Lucene repository properties - help needed in Alfresco Forum
Getting started
Tags
Find what you came for
We want to make your experience in Hyland Connect as valuable as possible, so we put together some helpful links.
