You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@solr.apache.org by Vinay Kumar <vi...@gmail.com> on 2023/02/13 05:56:13 UTC

okta integration throwing error after enabling ssl

HI All ,


Recently we migrated our application from http to https , okta integration
was working on http , but i am seeing the below error on https when ssl is
enabled on solr 9.could you please help me to resolve the error.


ERROR - 2023-02-10 17:49:54.117; [   ]
org.apache.solr.common.SolrException; null

org.apache.solr.common.SolrException: *Well-known config could not be read
from url
https://auth.uspto.gov/oauth2/ausl3dal2JfnJh6/.well-known/openid-configuration
<https://auth.uspto.gov/oauth2/ausl3dal2JfnJ2ENi4h6/.well-known/openid-configuration>*

*        at
org.apache.solr.security.jwt.JWTIssuerConfig$WellKnownDiscoveryConfig.parse(JWTIssuerConfig.java:478)
~[?:?]*

        at
org.apache.solr.security.jwt.JWTIssuerConfig.fetchWellKnown(JWTIssuerConfig.java:196)
~[?:?]

        at
org.apache.solr.security.jwt.JWTIssuerConfig.init(JWTIssuerConfig.java:106)
~[?:?]

        at
org.apache.solr.security.jwt.JWTAuthPlugin.parseIssuerFromTopLevelConfig(JWTAuthPlugin.java:315)
~[?:?]

        at
org.apache.solr.security.jwt.JWTAuthPlugin.init(JWTAuthPlugin.java:254)
~[?:?]

        at org.apache.solr.security.MultiA


Thanks

VInay

Re: okta integration throwing error after enabling ssl

Posted by Vinay Kumar <vi...@gmail.com>.
Jan,

After importing the okta root cert in the trust store.jks the issue has
been resolved thanks for checking

Thanks
Vinay

On Mon, Feb 13, 2023 at 6:13 AM Jan Høydahl <ja...@cominvent.com> wrote:

> Hi,
>
> You cut the error message stack trace. Can you please paste the entire
> stack trace to see what the reason was?
> It could be related to validating SSL certificates, or it could be
> something else.
>
> Jan
>
> > 13. feb. 2023 kl. 06:56 skrev Vinay Kumar <vi...@gmail.com>:
> >
> > HI All ,
> >
> >
> > Recently we migrated our application from http to https , okta
> integration
> > was working on http , but i am seeing the below error on https when ssl
> is
> > enabled on solr 9.could you please help me to resolve the error.
> >
> >
> > ERROR - 2023-02-10 17:49:54.117; [   ]
> > org.apache.solr.common.SolrException; null
> >
> > org.apache.solr.common.SolrException: *Well-known config could not be
> read
> > from url
> >
> https://auth.uspto.gov/oauth2/ausl3dal2JfnJh6/.well-known/openid-configuration
> > <
> https://auth.uspto.gov/oauth2/ausl3dal2JfnJ2ENi4h6/.well-known/openid-configuration
> >*
> >
> > *        at
> >
> org.apache.solr.security.jwt.JWTIssuerConfig$WellKnownDiscoveryConfig.parse(JWTIssuerConfig.java:478)
> > ~[?:?]*
> >
> >        at
> >
> org.apache.solr.security.jwt.JWTIssuerConfig.fetchWellKnown(JWTIssuerConfig.java:196)
> > ~[?:?]
> >
> >        at
> >
> org.apache.solr.security.jwt.JWTIssuerConfig.init(JWTIssuerConfig.java:106)
> > ~[?:?]
> >
> >        at
> >
> org.apache.solr.security.jwt.JWTAuthPlugin.parseIssuerFromTopLevelConfig(JWTAuthPlugin.java:315)
> > ~[?:?]
> >
> >        at
> > org.apache.solr.security.jwt.JWTAuthPlugin.init(JWTAuthPlugin.java:254)
> > ~[?:?]
> >
> >        at org.apache.solr.security.MultiA
> >
> >
> > Thanks
> >
> > VInay
>
>

Re: okta integration throwing error after enabling ssl

Posted by Jan Høydahl <ja...@cominvent.com>.
Hi,

You cut the error message stack trace. Can you please paste the entire stack trace to see what the reason was?
It could be related to validating SSL certificates, or it could be something else.

Jan

> 13. feb. 2023 kl. 06:56 skrev Vinay Kumar <vi...@gmail.com>:
> 
> HI All ,
> 
> 
> Recently we migrated our application from http to https , okta integration
> was working on http , but i am seeing the below error on https when ssl is
> enabled on solr 9.could you please help me to resolve the error.
> 
> 
> ERROR - 2023-02-10 17:49:54.117; [   ]
> org.apache.solr.common.SolrException; null
> 
> org.apache.solr.common.SolrException: *Well-known config could not be read
> from url
> https://auth.uspto.gov/oauth2/ausl3dal2JfnJh6/.well-known/openid-configuration
> <https://auth.uspto.gov/oauth2/ausl3dal2JfnJ2ENi4h6/.well-known/openid-configuration>*
> 
> *        at
> org.apache.solr.security.jwt.JWTIssuerConfig$WellKnownDiscoveryConfig.parse(JWTIssuerConfig.java:478)
> ~[?:?]*
> 
>        at
> org.apache.solr.security.jwt.JWTIssuerConfig.fetchWellKnown(JWTIssuerConfig.java:196)
> ~[?:?]
> 
>        at
> org.apache.solr.security.jwt.JWTIssuerConfig.init(JWTIssuerConfig.java:106)
> ~[?:?]
> 
>        at
> org.apache.solr.security.jwt.JWTAuthPlugin.parseIssuerFromTopLevelConfig(JWTAuthPlugin.java:315)
> ~[?:?]
> 
>        at
> org.apache.solr.security.jwt.JWTAuthPlugin.init(JWTAuthPlugin.java:254)
> ~[?:?]
> 
>        at org.apache.solr.security.MultiA
> 
> 
> Thanks
> 
> VInay