cancel
Showing results for 
Search instead for 
Did you mean: 

Keystores and certificates for Repository and Solr in 4.0.c

jonvargas
Confirmed Champ
Confirmed Champ
Hi,

I migrated a 4.0.b installation to 4.0.c one, and then I installed and configured Solr as a webapp, but neither me (by using browser) or Alfresco are unable to connect to Solr, and a 401 HTTP Error is returned.

Afaik, both Alfresco and the web browser should have an installed certificate so that a SSL connection could be done correctly. When using a clean 4.0.c bundle installation and adding "browser.p12" to Firefox, it works. But when I copied those keystores, passwords, keys and configuration from the pristine 4.0.c installation to 4.0.b one, Alfresco raises a 401 exception when the user tries to perform a search.

The same error (HTTP 301) happens when I try to access to by using browser directly.

Then, I tried to generate new key/pair certificates for both Solr and Repository as described here, but I need cacert.key and cacert.key, which are not available (or maybe I haven't found them).

Is it required to generate new key files for each new Alfresco installation?

How can I proceed, what follows?

In browser:

type Status report

message Cannot authenticate with the provided credentials

description This request requires HTTP authentication (Cannot authenticate with the provided credentials).

In catalina.out:


SEVERE: Job (Solr.CoreTracker-alfresco threw an exception.
org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: org.alfresco.error.AlfrescoRuntimeException: 00312115 GetModelsDiff return status is 401]
        at org.quartz.core.JobRunShell.run(JobRunShell.java:227)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:563)
Caused by: org.alfresco.error.AlfrescoRuntimeException: 00312115 GetModelsDiff return status is 401
        at org.alfresco.solr.client.SOLRAPIClient.getModelsDiff(SOLRAPIClient.java:1011)
        at org.alfresco.solr.tracker.CoreTracker.trackModels(CoreTracker.java:1453)
        at org.alfresco.solr.tracker.CoreTracker.trackRepository(CoreTracker.java:1126)
        at org.alfresco.solr.tracker.CoreTracker.updateIndex(CoreTracker.java:483)
        at org.alfresco.solr.tracker.CoreTrackerJob.execute(CoreTrackerJob.java:45)
        at org.quartz.core.JobRunShell.run(JobRunShell.java:216)
        … 1 more

1 REPLY 1

jonvargas
Confirmed Champ
Confirmed Champ
I fixed partially the problem by:

* Regerating keys and passwords for Alfresco and Solr
* Adding "issued to" of certificates to tomcat-users.xml
* Granting "repo" and "repoclient" roles to this user
* Cleaning up archive and workspace directories under solr folder

Although the problem described here doesn't happen again, when using the search box the process always return 0 results, for both old and new documents. Any idea about what else has to be done to support Solr on 4.0.c upgrade from 4.0.b?