You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by "Steve Rowe (JIRA)" <ji...@apache.org> on 2015/01/29 23:06:37 UTC
[jira] [Resolved] (SOLR-6758) Solr node to node communication
errors w/ SSL + client auth
[ https://issues.apache.org/jira/browse/SOLR-6758?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Steve Rowe resolved SOLR-6758.
------------------------------
Resolution: Invalid
Assignee: Steve Rowe
[~liuqibj], these sorts of questions should be asked on the solr-user mailing list before you create a JIRA.
> Solr node to node communication errors w/ SSL + client auth
> -----------------------------------------------------------
>
> Key: SOLR-6758
> URL: https://issues.apache.org/jira/browse/SOLR-6758
> Project: Solr
> Issue Type: Bug
> Reporter: liuqibj
> Assignee: Steve Rowe
>
> Enable two solr servers SSL w/ client auth(JSSE) and then change solr.xml to use 8443 port and change zookeeper to use https instead of http.
> then starting the two solr server and found these errors. Any suggestions?
> ERROR - 2014-11-19 12:55:31.125; org.apache.solr.common.SolrException; null:org.apache.solr.common.SolrException: org.apache.solr.client.solrj.SolrServerException: IOException occured when talking to server at: https://9.12.11.9:8443/solr/collection2_shard1_replica2
> at org.apache.solr.handler.component.SearchHandler.handleRequestBody(SearchHandler.java:308)
> at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:135)
> at org.apache.solr.core.SolrCore.execute(SolrCore.java:1916)
> at org.apache.solr.servlet.SolrDispatchFilter.execute(SolrDispatchFilter.java:780)
> at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:427)
> at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:217)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
> at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)
> at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)
> at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
> at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:950)
> at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
> at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408)
> at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1040)
> at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:607)
> at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:314)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1156)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:626)
> at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
> at java.lang.Thread.run(Thread.java:804)
> Caused by: org.apache.solr.client.solrj.SolrServerException: IOException occured when talking to server at: https://9.12.11.9::8443/solr/collection2_shard1_replica2
> at org.apache.solr.client.solrj.impl.HttpSolrServer.request(HttpSolrServer.java:507)
> at org.apache.solr.client.solrj.impl.HttpSolrServer.request(HttpSolrServer.java:199)
> at org.apache.solr.handler.component.HttpShardHandler$1.call(HttpShardHandler.java:156)
> at org.apache.solr.handler.component.HttpShardHandler$1.call(HttpShardHandler.java:118)
> at java.util.concurrent.FutureTask.run(FutureTask.java:273)
> at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:482)
> at java.util.concurrent.FutureTask.run(FutureTask.java:273)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1156)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:626)
> ... 1 more
> Caused by: javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.j: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is:
> java.security.cert.CertPathValidatorException: The certificate issued by CN=testing, L=lt, ST=mass, OU=test, O=IBM test, C=ZQ is not trusted; internal cause is:
> java.security.cert.CertPathValidatorException: Certificate chaining error
> at com.ibm.jsse2.j.a(j.java:36)
> at com.ibm.jsse2.qc.a(qc.java:199)
> at com.ibm.jsse2.ab.a(ab.java:171)
> at com.ibm.jsse2.ab.a(ab.java:180)
> at com.ibm.jsse2.bb.a(bb.java:346)
> at com.ibm.jsse2.bb.a(bb.java:559)
> at com.ibm.jsse2.ab.r(ab.java:554)
> at com.ibm.jsse2.ab.a(ab.java:325)
> at com.ibm.jsse2.qc.a(qc.java:617)
> at com.ibm.jsse2.qc.h(qc.java:103)
> at com.ibm.jsse2.qc.a(qc.java:166)
> at com.ibm.jsse2.qc.startHandshake(qc.java:649)
> at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:533)
> at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:401)
> at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:178)
> at org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:304)
> at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:610)
> at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:445)
> at org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:863)
> at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)
> at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:106)
> at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:57)
> at org.apache.solr.client.solrj.impl.HttpSolrServer.request(HttpSolrServer.java:395)
> ... 9 more
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org