You are viewing a plain text version of this content. The canonical link for it is here.
Posted to solr-user@lucene.apache.org by Ilan Schwarts <il...@gmail.com> on 2016/03/08 17:51:09 UTC
Failed to set SSL solr 5.2.1 Windows OS
Hi all, I am trying to integrate solr with SSL on Windows 7 OS
I followed the enable ssl guide at
https://cwiki.apache.org/confluence/display/solr/Enabling+SSL
I created the keystore and placed in on etc folder. I un-commented the
lines and set:
SOLR_SSL_KEY_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks
SOLR_SSL_KEY_STORE_PASSWORD=password
SOLR_SSL_TRUST_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks
SOLR_SSL_TRUST_STORE_PASSWORD=password
SOLR_SSL_NEED_CLIENT_AUTH=false
When i test the storekey using
keytool -list -alias solr-ssl -keystore
C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks -storepass password -keypass
password
It is okay, and print me there is 1 entry in keystore.
When i am running in from solr, it will write:
"Keystore was tampered with, or password was incorrect"
I get this exception after JavaKeyStore.engineLoad(JavaKeyStore.java:780)
If i replace
SOLR_SSL_KEY_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks with
SOLR_SSL_KEY_STORE=NOTHING_REALISTIC
it will write the same error, i suspect i dont deliver the path as it
should be.
Any suggestions ?
Thanks
--
-
Ilan Schwarts
Re: Failed to set SSL solr 5.2.1 Windows OS
Posted by Steve Rowe <sa...@gmail.com>.
So, did you try converting the backslashes to forward slashes?
You could try to increase logging to get more information: <http://eclipse.org/jetty/documentation/current/configuring-logging.html>
Can you provide a larger snippet of your log around the error?
Sounds like at a minimum Solr could do better at reporting errors locating/loading SSL stores.
Yes, the files in server/etc are being used in solr 5.2.1.
--
Steve
www.lucidworks.com
> On Mar 9, 2016, at 2:14 AM, Ilan Schwarts <il...@gmail.com> wrote:
>
> How would one try to solve this issue? What would you suggest me to do?
> Debug that module? I will try only to install clean jetty with ssl first.
>
> Another question. The files jetty.xml\jetty-ssl.xml and the rest of files
> in /etc are being used in solr 5.2.1?
> On Mar 9, 2016 12:08 AM, "Steve Rowe" <sa...@gmail.com> wrote:
>
>> Hmm, not sure what’s happening. Have you tried converting the backslashes
>> in your paths to forward slashes?
>>
>> --
>> Steve
>> www.lucidworks.com
>>
>>> On Mar 8, 2016, at 3:39 PM, Ilan Schwarts <il...@gmail.com> wrote:
>>>
>>> Hi, thanks for reply.
>>> I am using solr.in.cmd
>>> I even put some pause in the cmd with echo to see the parameters are
>> ok.. This is the original file as found in
>> https://www.apache.org/dist/lucene/solr/5.2.1/solr-5.2.1.zip
>>>
>>> <image.png>
>>>
>>> On Tue, Mar 8, 2016 at 10:25 PM, Steve Rowe <sa...@gmail.com> wrote:
>>> Hi Ilan,
>>>
>>> Looks like you’re modifying solr.in.sh instead of solr.in.cmd?
>>>
>>> FYI running under Cygwin is not supported.
>>>
>>> --
>>> Steve
>>> www.lucidworks.com
>>>
>>>> On Mar 8, 2016, at 11:51 AM, Ilan Schwarts <il...@gmail.com> wrote:
>>>>
>>>> Hi all, I am trying to integrate solr with SSL on Windows 7 OS
>>>> I followed the enable ssl guide at
>>>> https://cwiki.apache.org/confluence/display/solr/Enabling+SSL
>>>>
>>>> I created the keystore and placed in on etc folder. I un-commented the
>>>> lines and set:
>>>> SOLR_SSL_KEY_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks
>>>> SOLR_SSL_KEY_STORE_PASSWORD=password
>>>> SOLR_SSL_TRUST_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks
>>>> SOLR_SSL_TRUST_STORE_PASSWORD=password
>>>> SOLR_SSL_NEED_CLIENT_AUTH=false
>>>>
>>>> When i test the storekey using
>>>> keytool -list -alias solr-ssl -keystore
>>>> C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks -storepass password
>> -keypass
>>>> password
>>>> It is okay, and print me there is 1 entry in keystore.
>>>>
>>>> When i am running in from solr, it will write:
>>>> "Keystore was tampered with, or password was incorrect"
>>>> I get this exception after
>> JavaKeyStore.engineLoad(JavaKeyStore.java:780)
>>>>
>>>>
>>>> If i replace
>>>> SOLR_SSL_KEY_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks with
>>>> SOLR_SSL_KEY_STORE=NOTHING_REALISTIC
>>>> it will write the same error, i suspect i dont deliver the path as it
>>>> should be.
>>>>
>>>> Any suggestions ?
>>>>
>>>> Thanks
>>>>
>>>>
>>>> --
>>>>
>>>>
>>>> -
>>>> Ilan Schwarts
>>>
>>>
>>>
>>>
>>> --
>>>
>>>
>>> -
>>> Ilan Schwarts
>>
>>
Re: Failed to set SSL solr 5.2.1 Windows OS
Posted by Ilan Schwarts <il...@gmail.com>.
How would one try to solve this issue? What would you suggest me to do?
Debug that module? I will try only to install clean jetty with ssl first.
Another question. The files jetty.xml\jetty-ssl.xml and the rest of files
in /etc are being used in solr 5.2.1?
On Mar 9, 2016 12:08 AM, "Steve Rowe" <sa...@gmail.com> wrote:
> Hmm, not sure what’s happening. Have you tried converting the backslashes
> in your paths to forward slashes?
>
> --
> Steve
> www.lucidworks.com
>
> > On Mar 8, 2016, at 3:39 PM, Ilan Schwarts <il...@gmail.com> wrote:
> >
> > Hi, thanks for reply.
> > I am using solr.in.cmd
> > I even put some pause in the cmd with echo to see the parameters are
> ok.. This is the original file as found in
> https://www.apache.org/dist/lucene/solr/5.2.1/solr-5.2.1.zip
> >
> > <image.png>
> >
> > On Tue, Mar 8, 2016 at 10:25 PM, Steve Rowe <sa...@gmail.com> wrote:
> > Hi Ilan,
> >
> > Looks like you’re modifying solr.in.sh instead of solr.in.cmd?
> >
> > FYI running under Cygwin is not supported.
> >
> > --
> > Steve
> > www.lucidworks.com
> >
> > > On Mar 8, 2016, at 11:51 AM, Ilan Schwarts <il...@gmail.com> wrote:
> > >
> > > Hi all, I am trying to integrate solr with SSL on Windows 7 OS
> > > I followed the enable ssl guide at
> > > https://cwiki.apache.org/confluence/display/solr/Enabling+SSL
> > >
> > > I created the keystore and placed in on etc folder. I un-commented the
> > > lines and set:
> > > SOLR_SSL_KEY_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks
> > > SOLR_SSL_KEY_STORE_PASSWORD=password
> > > SOLR_SSL_TRUST_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks
> > > SOLR_SSL_TRUST_STORE_PASSWORD=password
> > > SOLR_SSL_NEED_CLIENT_AUTH=false
> > >
> > > When i test the storekey using
> > > keytool -list -alias solr-ssl -keystore
> > > C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks -storepass password
> -keypass
> > > password
> > > It is okay, and print me there is 1 entry in keystore.
> > >
> > > When i am running in from solr, it will write:
> > > "Keystore was tampered with, or password was incorrect"
> > > I get this exception after
> JavaKeyStore.engineLoad(JavaKeyStore.java:780)
> > >
> > >
> > > If i replace
> > > SOLR_SSL_KEY_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks with
> > > SOLR_SSL_KEY_STORE=NOTHING_REALISTIC
> > > it will write the same error, i suspect i dont deliver the path as it
> > > should be.
> > >
> > > Any suggestions ?
> > >
> > > Thanks
> > >
> > >
> > > --
> > >
> > >
> > > -
> > > Ilan Schwarts
> >
> >
> >
> >
> > --
> >
> >
> > -
> > Ilan Schwarts
>
>
Re: Failed to set SSL solr 5.2.1 Windows OS
Posted by Steve Rowe <sa...@gmail.com>.
Hmm, not sure what’s happening. Have you tried converting the backslashes in your paths to forward slashes?
--
Steve
www.lucidworks.com
> On Mar 8, 2016, at 3:39 PM, Ilan Schwarts <il...@gmail.com> wrote:
>
> Hi, thanks for reply.
> I am using solr.in.cmd
> I even put some pause in the cmd with echo to see the parameters are ok.. This is the original file as found in https://www.apache.org/dist/lucene/solr/5.2.1/solr-5.2.1.zip
>
> <image.png>
>
> On Tue, Mar 8, 2016 at 10:25 PM, Steve Rowe <sa...@gmail.com> wrote:
> Hi Ilan,
>
> Looks like you’re modifying solr.in.sh instead of solr.in.cmd?
>
> FYI running under Cygwin is not supported.
>
> --
> Steve
> www.lucidworks.com
>
> > On Mar 8, 2016, at 11:51 AM, Ilan Schwarts <il...@gmail.com> wrote:
> >
> > Hi all, I am trying to integrate solr with SSL on Windows 7 OS
> > I followed the enable ssl guide at
> > https://cwiki.apache.org/confluence/display/solr/Enabling+SSL
> >
> > I created the keystore and placed in on etc folder. I un-commented the
> > lines and set:
> > SOLR_SSL_KEY_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks
> > SOLR_SSL_KEY_STORE_PASSWORD=password
> > SOLR_SSL_TRUST_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks
> > SOLR_SSL_TRUST_STORE_PASSWORD=password
> > SOLR_SSL_NEED_CLIENT_AUTH=false
> >
> > When i test the storekey using
> > keytool -list -alias solr-ssl -keystore
> > C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks -storepass password -keypass
> > password
> > It is okay, and print me there is 1 entry in keystore.
> >
> > When i am running in from solr, it will write:
> > "Keystore was tampered with, or password was incorrect"
> > I get this exception after JavaKeyStore.engineLoad(JavaKeyStore.java:780)
> >
> >
> > If i replace
> > SOLR_SSL_KEY_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks with
> > SOLR_SSL_KEY_STORE=NOTHING_REALISTIC
> > it will write the same error, i suspect i dont deliver the path as it
> > should be.
> >
> > Any suggestions ?
> >
> > Thanks
> >
> >
> > --
> >
> >
> > -
> > Ilan Schwarts
>
>
>
>
> --
>
>
> -
> Ilan Schwarts
Re: Failed to set SSL solr 5.2.1 Windows OS
Posted by Ilan Schwarts <il...@gmail.com>.
Hi, thanks for reply.
I am using solr.in.cmd
I even put some pause in the cmd with echo to see the parameters are ok..
This is the original file as found in
https://www.apache.org/dist/lucene/solr/5.2.1/solr-5.2.1.zip
[image: Inline image 1]
On Tue, Mar 8, 2016 at 10:25 PM, Steve Rowe <sa...@gmail.com> wrote:
> Hi Ilan,
>
> Looks like you’re modifying solr.in.sh instead of solr.in.cmd?
>
> FYI running under Cygwin is not supported.
>
> --
> Steve
> www.lucidworks.com
>
> > On Mar 8, 2016, at 11:51 AM, Ilan Schwarts <il...@gmail.com> wrote:
> >
> > Hi all, I am trying to integrate solr with SSL on Windows 7 OS
> > I followed the enable ssl guide at
> > https://cwiki.apache.org/confluence/display/solr/Enabling+SSL
> >
> > I created the keystore and placed in on etc folder. I un-commented the
> > lines and set:
> > SOLR_SSL_KEY_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks
> > SOLR_SSL_KEY_STORE_PASSWORD=password
> > SOLR_SSL_TRUST_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks
> > SOLR_SSL_TRUST_STORE_PASSWORD=password
> > SOLR_SSL_NEED_CLIENT_AUTH=false
> >
> > When i test the storekey using
> > keytool -list -alias solr-ssl -keystore
> > C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks -storepass password
> -keypass
> > password
> > It is okay, and print me there is 1 entry in keystore.
> >
> > When i am running in from solr, it will write:
> > "Keystore was tampered with, or password was incorrect"
> > I get this exception after JavaKeyStore.engineLoad(JavaKeyStore.java:780)
> >
> >
> > If i replace
> > SOLR_SSL_KEY_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks with
> > SOLR_SSL_KEY_STORE=NOTHING_REALISTIC
> > it will write the same error, i suspect i dont deliver the path as it
> > should be.
> >
> > Any suggestions ?
> >
> > Thanks
> >
> >
> > --
> >
> >
> > -
> > Ilan Schwarts
>
>
--
-
Ilan Schwarts
Re: Failed to set SSL solr 5.2.1 Windows OS
Posted by Steve Rowe <sa...@gmail.com>.
Hi Ilan,
Looks like you’re modifying solr.in.sh instead of solr.in.cmd?
FYI running under Cygwin is not supported.
--
Steve
www.lucidworks.com
> On Mar 8, 2016, at 11:51 AM, Ilan Schwarts <il...@gmail.com> wrote:
>
> Hi all, I am trying to integrate solr with SSL on Windows 7 OS
> I followed the enable ssl guide at
> https://cwiki.apache.org/confluence/display/solr/Enabling+SSL
>
> I created the keystore and placed in on etc folder. I un-commented the
> lines and set:
> SOLR_SSL_KEY_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks
> SOLR_SSL_KEY_STORE_PASSWORD=password
> SOLR_SSL_TRUST_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks
> SOLR_SSL_TRUST_STORE_PASSWORD=password
> SOLR_SSL_NEED_CLIENT_AUTH=false
>
> When i test the storekey using
> keytool -list -alias solr-ssl -keystore
> C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks -storepass password -keypass
> password
> It is okay, and print me there is 1 entry in keystore.
>
> When i am running in from solr, it will write:
> "Keystore was tampered with, or password was incorrect"
> I get this exception after JavaKeyStore.engineLoad(JavaKeyStore.java:780)
>
>
> If i replace
> SOLR_SSL_KEY_STORE=C:\solr-5.2.1\server\etc\solr-ssl.keystore.jks with
> SOLR_SSL_KEY_STORE=NOTHING_REALISTIC
> it will write the same error, i suspect i dont deliver the path as it
> should be.
>
> Any suggestions ?
>
> Thanks
>
>
> --
>
>
> -
> Ilan Schwarts