You are viewing a plain text version of this content. The canonical link for it is here.
Posted to solr-user@lucene.apache.org by Sebastjanas <se...@vaisovas.lt> on 2017/05/09 08:17:22 UTC

Solr SSL setup with bought certificate

Hello,

I installed 5.5.4 on Centos to /opt/solr. Also I installed init script
using install_solr_service.sh. I've imported bought certificate to keystore
and now trying to start it up with SSL, using following settings in
/etc/default/solr.in.sh:

SOLR_SSL_ENABLED=true
SOLR_SSL_KEY_STORE=etc/solr-ssl.keystore.jks
SOLR_SSL_KEY_STORE_PASSWORD=[password]
#SOLR_SSL_TRUST_STORE=etc/keystore.jks
#SOLR_SSL_TRUST_STORE_PASSWORD=[password]
SOLR_SSL_NEED_CLIENT_AUTH=false
SOLR_SSL_WANT_CLIENT_AUTH=false

But it doesn't start with following error:

    1629 WARN  (main) [   ] o.e.j.u.c.AbstractLifeCycle FAILED
SslContextFactory@564fabc8(etc/solr-ssl.keystore.jks,):
java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
        at java.io.FileInputStream.open0(Native Method)
        at java.io.FileInputStream.open(FileInputStream.java:195)
        at java.io.FileInputStream.<init>(FileInputStream.java:138)
        at org.eclipse.jetty.util.resource.FileResource.getInputStream(FileResource.java:290)
        at org.eclipse.jetty.util.security.CertificateUtils.getKeyStore(CertificateUtils.java:43)
        at org.eclipse.jetty.util.ssl.SslContextFactory.loadTrustStore(SslContextFactory.java:884)
        at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:274)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
        at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:64)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
        at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:256)
        at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
        at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:236)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
        at org.eclipse.jetty.server.Server.doStart(Server.java:366)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
        at org.eclipse.jetty.xml.XmlConfiguration$1.run(XmlConfiguration.java:1255)
        at java.security.AccessController.doPrivileged(Native Method)
        at org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1174)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at org.eclipse.jetty.start.Main.invokeMain(Main.java:321)
        at org.eclipse.jetty.start.Main.start(Main.java:817)
        at org.eclipse.jetty.start.Main.main(Main.java:112)
1631 INFO  (coreLoadExecutor-6-thread-1) [   ] o.a.s.c.SolrConfig
Adding specified lib dirs to ClassLoader
1634 WARN  (main) [   ] o.e.j.u.c.AbstractLifeCycle FAILED
SslConnectionFactory@74fe5c40{SSL-http/1.1}:
java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
        at java.io.FileInputStream.open0(Native Method)
        at java.io.FileInputStream.open(FileInputStream.java:195)
        at java.io.FileInputStream.<init>(FileInputStream.java:138)
        at org.eclipse.jetty.util.resource.FileResource.getInputStream(FileResource.java:290)
        at org.eclipse.jetty.util.security.CertificateUtils.getKeyStore(CertificateUtils.java:43)
        at org.eclipse.jetty.util.ssl.SslContextFactory.loadTrustStore(SslContextFactory.java:884)
        at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:274)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
        at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:64)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
        at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:256)
        at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
        at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:236)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
        at org.eclipse.jetty.server.Server.doStart(Server.java:366)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
        at org.eclipse.jetty.xml.XmlConfiguration$1.run(XmlConfiguration.java:1255)
        at java.security.AccessController.doPrivileged(Native Method)
        at org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1174)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at org.eclipse.jetty.start.Main.invokeMain(Main.java:321)
        at org.eclipse.jetty.start.Main.start(Main.java:817)
        at org.eclipse.jetty.start.Main.main(Main.java:112)
1636 WARN  (main) [   ] o.e.j.u.c.AbstractLifeCycle FAILED
ServerConnector@3febb011{SSL-http/1.1}{0.0.0.0:8983}:
java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
        at java.io.FileInputStream.open0(Native Method)
        at java.io.FileInputStream.open(FileInputStream.java:195)
        at java.io.FileInputStream.<init>(FileInputStream.java:138)
        at org.eclipse.jetty.util.resource.FileResource.getInputStream(FileResource.java:290)
        at org.eclipse.jetty.util.security.CertificateUtils.getKeyStore(CertificateUtils.java:43)
        at org.eclipse.jetty.util.ssl.SslContextFactory.loadTrustStore(SslContextFactory.java:884)
        at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:274)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
        at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:64)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
        at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:256)
        at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
        at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:236)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
        at org.eclipse.jetty.server.Server.doStart(Server.java:366)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
        at org.eclipse.jetty.xml.XmlConfiguration$1.run(XmlConfiguration.java:1255)
        at java.security.AccessController.doPrivileged(Native Method)
        at org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1174)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at org.eclipse.jetty.start.Main.invokeMain(Main.java:321)
        at org.eclipse.jetty.start.Main.start(Main.java:817)
        at org.eclipse.jetty.start.Main.main(Main.java:112)

I tried to use:
SOLR_SSL_KEY_STORE=/opt/solr-5.5.4/server/etc/solr-ssl.keystore.jks, but
I'm still getting the same error. Can't find where the issue could be. Any
ideas?

-- 
Pagarbiai Sebastjanas.

Re: Solr SSL setup with bought certificate

Posted by Sebastjanas <se...@vaisovas.lt>.
I don't know why this script worked on CentOS, but it did.

Also I managed to make it work with uncommenting following two lines:

SOLR_SSL_TRUST_STORE=/opt/solr/server/etc/solr-ssl.keystore.jks
SOLR_SSL_TRUST_STORE_PASSWORD=[password]

I don't know where did I find that these need to be uncommented only if
it's self-signed certificate, now it looks like they have to be uncommented
in both cases.


On Tue, May 9, 2017 at 4:40 PM, Steve Rowe <sa...@gmail.com> wrote:

> Hi,
>
> AFAICT the Solr 5.5.4 install_solr_service.sh doesn’t support Centos
> (support was added in 6.3: SOLR-9475).  How did you make it work?
>
> I’m guessing there are permissions problems in your installation
> directory, such that the account being used to start Solr doesn’t have
> execute and/or read permission somewhere under /opt/solr-5.5.4/.
>
> The install script sets up permissions like this:
>
> -----
> chown -R root: "$SOLR_INSTALL_DIR"
> find "$SOLR_INSTALL_DIR" -type d -print0 | xargs -0 chmod 0755
> find "$SOLR_INSTALL_DIR" -type f -print0 | xargs -0 chmod 0644
> chmod -R 0755 "$SOLR_INSTALL_DIR/bin”
> -----
>
> --
> Steve
> www.lucidworks.com
>
> > On May 9, 2017, at 4:17 AM, Sebastjanas <se...@vaisovas.lt> wrote:
> >
> > Hello,
> >
> > I installed 5.5.4 on Centos to /opt/solr. Also I installed init script
> > using install_solr_service.sh. I've imported bought certificate to
> keystore
> > and now trying to start it up with SSL, using following settings in
> > /etc/default/solr.in.sh:
> >
> > SOLR_SSL_ENABLED=true
> > SOLR_SSL_KEY_STORE=etc/solr-ssl.keystore.jks
> > SOLR_SSL_KEY_STORE_PASSWORD=[password]
> > #SOLR_SSL_TRUST_STORE=etc/keystore.jks
> > #SOLR_SSL_TRUST_STORE_PASSWORD=[password]
> > SOLR_SSL_NEED_CLIENT_AUTH=false
> > SOLR_SSL_WANT_CLIENT_AUTH=false
> >
> > But it doesn't start with following error:
> >
> >    1629 WARN  (main) [   ] o.e.j.u.c.AbstractLifeCycle FAILED
> > SslContextFactory@564fabc8(etc/solr-ssl.keystore.jks,):
> > java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> > java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> >        at java.io.FileInputStream.open0(Native Method)
> >        at java.io.FileInputStream.open(FileInputStream.java:195)
> >        at java.io.FileInputStream.<init>(FileInputStream.java:138)
> >        at org.eclipse.jetty.util.resource.FileResource.
> getInputStream(FileResource.java:290)
> >        at org.eclipse.jetty.util.security.CertificateUtils.
> getKeyStore(CertificateUtils.java:43)
> >        at org.eclipse.jetty.util.ssl.SslContextFactory.loadTrustStore(
> SslContextFactory.java:884)
> >        at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(
> SslContextFactory.java:274)
> >        at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> >        at org.eclipse.jetty.util.component.ContainerLifeCycle.
> start(ContainerLifeCycle.java:132)
> >        at org.eclipse.jetty.util.component.ContainerLifeCycle.
> doStart(ContainerLifeCycle.java:114)
> >        at org.eclipse.jetty.server.SslConnectionFactory.doStart(
> SslConnectionFactory.java:64)
> >        at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> >        at org.eclipse.jetty.util.component.ContainerLifeCycle.
> start(ContainerLifeCycle.java:132)
> >        at org.eclipse.jetty.util.component.ContainerLifeCycle.
> doStart(ContainerLifeCycle.java:114)
> >        at org.eclipse.jetty.server.AbstractConnector.doStart(
> AbstractConnector.java:256)
> >        at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(
> AbstractNetworkConnector.java:81)
> >        at org.eclipse.jetty.server.ServerConnector.doStart(
> ServerConnector.java:236)
> >        at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> >        at org.eclipse.jetty.server.Server.doStart(Server.java:366)
> >        at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> >        at org.eclipse.jetty.xml.XmlConfiguration$1.run(
> XmlConfiguration.java:1255)
> >        at java.security.AccessController.doPrivileged(Native Method)
> >        at org.eclipse.jetty.xml.XmlConfiguration.main(
> XmlConfiguration.java:1174)
> >        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> >        at sun.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
> >        at sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
> >        at java.lang.reflect.Method.invoke(Method.java:498)
> >        at org.eclipse.jetty.start.Main.invokeMain(Main.java:321)
> >        at org.eclipse.jetty.start.Main.start(Main.java:817)
> >        at org.eclipse.jetty.start.Main.main(Main.java:112)
> > 1631 INFO  (coreLoadExecutor-6-thread-1) [   ] o.a.s.c.SolrConfig
> > Adding specified lib dirs to ClassLoader
> > 1634 WARN  (main) [   ] o.e.j.u.c.AbstractLifeCycle FAILED
> > SslConnectionFactory@74fe5c40{SSL-http/1.1}:
> > java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> > java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> >        at java.io.FileInputStream.open0(Native Method)
> >        at java.io.FileInputStream.open(FileInputStream.java:195)
> >        at java.io.FileInputStream.<init>(FileInputStream.java:138)
> >        at org.eclipse.jetty.util.resource.FileResource.
> getInputStream(FileResource.java:290)
> >        at org.eclipse.jetty.util.security.CertificateUtils.
> getKeyStore(CertificateUtils.java:43)
> >        at org.eclipse.jetty.util.ssl.SslContextFactory.loadTrustStore(
> SslContextFactory.java:884)
> >        at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(
> SslContextFactory.java:274)
> >        at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> >        at org.eclipse.jetty.util.component.ContainerLifeCycle.
> start(ContainerLifeCycle.java:132)
> >        at org.eclipse.jetty.util.component.ContainerLifeCycle.
> doStart(ContainerLifeCycle.java:114)
> >        at org.eclipse.jetty.server.SslConnectionFactory.doStart(
> SslConnectionFactory.java:64)
> >        at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> >        at org.eclipse.jetty.util.component.ContainerLifeCycle.
> start(ContainerLifeCycle.java:132)
> >        at org.eclipse.jetty.util.component.ContainerLifeCycle.
> doStart(ContainerLifeCycle.java:114)
> >        at org.eclipse.jetty.server.AbstractConnector.doStart(
> AbstractConnector.java:256)
> >        at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(
> AbstractNetworkConnector.java:81)
> >        at org.eclipse.jetty.server.ServerConnector.doStart(
> ServerConnector.java:236)
> >        at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> >        at org.eclipse.jetty.server.Server.doStart(Server.java:366)
> >        at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> >        at org.eclipse.jetty.xml.XmlConfiguration$1.run(
> XmlConfiguration.java:1255)
> >        at java.security.AccessController.doPrivileged(Native Method)
> >        at org.eclipse.jetty.xml.XmlConfiguration.main(
> XmlConfiguration.java:1174)
> >        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> >        at sun.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
> >        at sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
> >        at java.lang.reflect.Method.invoke(Method.java:498)
> >        at org.eclipse.jetty.start.Main.invokeMain(Main.java:321)
> >        at org.eclipse.jetty.start.Main.start(Main.java:817)
> >        at org.eclipse.jetty.start.Main.main(Main.java:112)
> > 1636 WARN  (main) [   ] o.e.j.u.c.AbstractLifeCycle FAILED
> > ServerConnector@3febb011{SSL-http/1.1}{0.0.0.0:8983}:
> > java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> > java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> >        at java.io.FileInputStream.open0(Native Method)
> >        at java.io.FileInputStream.open(FileInputStream.java:195)
> >        at java.io.FileInputStream.<init>(FileInputStream.java:138)
> >        at org.eclipse.jetty.util.resource.FileResource.
> getInputStream(FileResource.java:290)
> >        at org.eclipse.jetty.util.security.CertificateUtils.
> getKeyStore(CertificateUtils.java:43)
> >        at org.eclipse.jetty.util.ssl.SslContextFactory.loadTrustStore(
> SslContextFactory.java:884)
> >        at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(
> SslContextFactory.java:274)
> >        at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> >        at org.eclipse.jetty.util.component.ContainerLifeCycle.
> start(ContainerLifeCycle.java:132)
> >        at org.eclipse.jetty.util.component.ContainerLifeCycle.
> doStart(ContainerLifeCycle.java:114)
> >        at org.eclipse.jetty.server.SslConnectionFactory.doStart(
> SslConnectionFactory.java:64)
> >        at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> >        at org.eclipse.jetty.util.component.ContainerLifeCycle.
> start(ContainerLifeCycle.java:132)
> >        at org.eclipse.jetty.util.component.ContainerLifeCycle.
> doStart(ContainerLifeCycle.java:114)
> >        at org.eclipse.jetty.server.AbstractConnector.doStart(
> AbstractConnector.java:256)
> >        at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(
> AbstractNetworkConnector.java:81)
> >        at org.eclipse.jetty.server.ServerConnector.doStart(
> ServerConnector.java:236)
> >        at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> >        at org.eclipse.jetty.server.Server.doStart(Server.java:366)
> >        at org.eclipse.jetty.util.component.AbstractLifeCycle.
> start(AbstractLifeCycle.java:68)
> >        at org.eclipse.jetty.xml.XmlConfiguration$1.run(
> XmlConfiguration.java:1255)
> >        at java.security.AccessController.doPrivileged(Native Method)
> >        at org.eclipse.jetty.xml.XmlConfiguration.main(
> XmlConfiguration.java:1174)
> >        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> >        at sun.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
> >        at sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
> >        at java.lang.reflect.Method.invoke(Method.java:498)
> >        at org.eclipse.jetty.start.Main.invokeMain(Main.java:321)
> >        at org.eclipse.jetty.start.Main.start(Main.java:817)
> >        at org.eclipse.jetty.start.Main.main(Main.java:112)
> >
> > I tried to use:
> > SOLR_SSL_KEY_STORE=/opt/solr-5.5.4/server/etc/solr-ssl.keystore.jks, but
> > I'm still getting the same error. Can't find where the issue could be.
> Any
> > ideas?
> >
> > --
> > Pagarbiai Sebastjanas.
>
>


-- 
Pagarbiai Sebastjanas.

Re: Solr SSL setup with bought certificate

Posted by Steve Rowe <sa...@gmail.com>.
Hi,

AFAICT the Solr 5.5.4 install_solr_service.sh doesn’t support Centos (support was added in 6.3: SOLR-9475).  How did you make it work?

I’m guessing there are permissions problems in your installation directory, such that the account being used to start Solr doesn’t have execute and/or read permission somewhere under /opt/solr-5.5.4/.

The install script sets up permissions like this:

-----
chown -R root: "$SOLR_INSTALL_DIR"
find "$SOLR_INSTALL_DIR" -type d -print0 | xargs -0 chmod 0755
find "$SOLR_INSTALL_DIR" -type f -print0 | xargs -0 chmod 0644
chmod -R 0755 "$SOLR_INSTALL_DIR/bin”
-----

--
Steve
www.lucidworks.com

> On May 9, 2017, at 4:17 AM, Sebastjanas <se...@vaisovas.lt> wrote:
> 
> Hello,
> 
> I installed 5.5.4 on Centos to /opt/solr. Also I installed init script
> using install_solr_service.sh. I've imported bought certificate to keystore
> and now trying to start it up with SSL, using following settings in
> /etc/default/solr.in.sh:
> 
> SOLR_SSL_ENABLED=true
> SOLR_SSL_KEY_STORE=etc/solr-ssl.keystore.jks
> SOLR_SSL_KEY_STORE_PASSWORD=[password]
> #SOLR_SSL_TRUST_STORE=etc/keystore.jks
> #SOLR_SSL_TRUST_STORE_PASSWORD=[password]
> SOLR_SSL_NEED_CLIENT_AUTH=false
> SOLR_SSL_WANT_CLIENT_AUTH=false
> 
> But it doesn't start with following error:
> 
>    1629 WARN  (main) [   ] o.e.j.u.c.AbstractLifeCycle FAILED
> SslContextFactory@564fabc8(etc/solr-ssl.keystore.jks,):
> java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
>        at java.io.FileInputStream.open0(Native Method)
>        at java.io.FileInputStream.open(FileInputStream.java:195)
>        at java.io.FileInputStream.<init>(FileInputStream.java:138)
>        at org.eclipse.jetty.util.resource.FileResource.getInputStream(FileResource.java:290)
>        at org.eclipse.jetty.util.security.CertificateUtils.getKeyStore(CertificateUtils.java:43)
>        at org.eclipse.jetty.util.ssl.SslContextFactory.loadTrustStore(SslContextFactory.java:884)
>        at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:274)
>        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>        at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
>        at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
>        at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:64)
>        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>        at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
>        at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
>        at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:256)
>        at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
>        at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:236)
>        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>        at org.eclipse.jetty.server.Server.doStart(Server.java:366)
>        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>        at org.eclipse.jetty.xml.XmlConfiguration$1.run(XmlConfiguration.java:1255)
>        at java.security.AccessController.doPrivileged(Native Method)
>        at org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1174)
>        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>        at java.lang.reflect.Method.invoke(Method.java:498)
>        at org.eclipse.jetty.start.Main.invokeMain(Main.java:321)
>        at org.eclipse.jetty.start.Main.start(Main.java:817)
>        at org.eclipse.jetty.start.Main.main(Main.java:112)
> 1631 INFO  (coreLoadExecutor-6-thread-1) [   ] o.a.s.c.SolrConfig
> Adding specified lib dirs to ClassLoader
> 1634 WARN  (main) [   ] o.e.j.u.c.AbstractLifeCycle FAILED
> SslConnectionFactory@74fe5c40{SSL-http/1.1}:
> java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
>        at java.io.FileInputStream.open0(Native Method)
>        at java.io.FileInputStream.open(FileInputStream.java:195)
>        at java.io.FileInputStream.<init>(FileInputStream.java:138)
>        at org.eclipse.jetty.util.resource.FileResource.getInputStream(FileResource.java:290)
>        at org.eclipse.jetty.util.security.CertificateUtils.getKeyStore(CertificateUtils.java:43)
>        at org.eclipse.jetty.util.ssl.SslContextFactory.loadTrustStore(SslContextFactory.java:884)
>        at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:274)
>        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>        at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
>        at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
>        at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:64)
>        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>        at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
>        at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
>        at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:256)
>        at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
>        at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:236)
>        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>        at org.eclipse.jetty.server.Server.doStart(Server.java:366)
>        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>        at org.eclipse.jetty.xml.XmlConfiguration$1.run(XmlConfiguration.java:1255)
>        at java.security.AccessController.doPrivileged(Native Method)
>        at org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1174)
>        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>        at java.lang.reflect.Method.invoke(Method.java:498)
>        at org.eclipse.jetty.start.Main.invokeMain(Main.java:321)
>        at org.eclipse.jetty.start.Main.start(Main.java:817)
>        at org.eclipse.jetty.start.Main.main(Main.java:112)
> 1636 WARN  (main) [   ] o.e.j.u.c.AbstractLifeCycle FAILED
> ServerConnector@3febb011{SSL-http/1.1}{0.0.0.0:8983}:
> java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
> java.io.FileNotFoundException: /opt/solr-5.5.4/server (Is a directory)
>        at java.io.FileInputStream.open0(Native Method)
>        at java.io.FileInputStream.open(FileInputStream.java:195)
>        at java.io.FileInputStream.<init>(FileInputStream.java:138)
>        at org.eclipse.jetty.util.resource.FileResource.getInputStream(FileResource.java:290)
>        at org.eclipse.jetty.util.security.CertificateUtils.getKeyStore(CertificateUtils.java:43)
>        at org.eclipse.jetty.util.ssl.SslContextFactory.loadTrustStore(SslContextFactory.java:884)
>        at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:274)
>        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>        at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
>        at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
>        at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:64)
>        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>        at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
>        at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
>        at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:256)
>        at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
>        at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:236)
>        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>        at org.eclipse.jetty.server.Server.doStart(Server.java:366)
>        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>        at org.eclipse.jetty.xml.XmlConfiguration$1.run(XmlConfiguration.java:1255)
>        at java.security.AccessController.doPrivileged(Native Method)
>        at org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1174)
>        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>        at java.lang.reflect.Method.invoke(Method.java:498)
>        at org.eclipse.jetty.start.Main.invokeMain(Main.java:321)
>        at org.eclipse.jetty.start.Main.start(Main.java:817)
>        at org.eclipse.jetty.start.Main.main(Main.java:112)
> 
> I tried to use:
> SOLR_SSL_KEY_STORE=/opt/solr-5.5.4/server/etc/solr-ssl.keystore.jks, but
> I'm still getting the same error. Can't find where the issue could be. Any
> ideas?
> 
> -- 
> Pagarbiai Sebastjanas.