liuqibj created SOLR-6758:
-----------------------------

             Summary: Solr node to node communication errors w/ SSL + client 
auth
                 Key: SOLR-6758
                 URL: https://issues.apache.org/jira/browse/SOLR-6758
             Project: Solr
          Issue Type: Bug
            Reporter: liuqibj


Enable two solr servers SSL w/ client auth(JSSE) and then change solr.xml to 
use 8443 port and change zookeeper to use https instead of http. 

then starting the two solr server and found these errors. Any suggestions?

ERROR - 2014-11-19 12:55:31.125; org.apache.solr.common.SolrException; 
null:org.apache.solr.common.SolrException: 
org.apache.solr.client.solrj.SolrServerException: IOException occured when 
talking to server at: https://9.12.11.9:8443/solr/collection2_shard1_replica2
        at 
org.apache.solr.handler.component.SearchHandler.handleRequestBody(SearchHandler.java:308)
        at 
org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:135)
        at org.apache.solr.core.SolrCore.execute(SolrCore.java:1916)
        at 
org.apache.solr.servlet.SolrDispatchFilter.execute(SolrDispatchFilter.java:780)
        at 
org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:427)
        at 
org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:217)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
        at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)
        at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)
        at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
        at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at 
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:950)
        at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
        at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408)
        at 
org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1040)
        at 
org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:607)
        at 
org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:314)
        at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1156)
        at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:626)
        at 
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
        at java.lang.Thread.run(Thread.java:804)
Caused by: org.apache.solr.client.solrj.SolrServerException: IOException 
occured when talking to server at: 
https://9.12.11.9::8443/solr/collection2_shard1_replica2
        at 
org.apache.solr.client.solrj.impl.HttpSolrServer.request(HttpSolrServer.java:507)
        at 
org.apache.solr.client.solrj.impl.HttpSolrServer.request(HttpSolrServer.java:199)
        at 
org.apache.solr.handler.component.HttpShardHandler$1.call(HttpShardHandler.java:156)
        at 
org.apache.solr.handler.component.HttpShardHandler$1.call(HttpShardHandler.java:118)
        at java.util.concurrent.FutureTask.run(FutureTask.java:273)
        at 
java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:482)
        at java.util.concurrent.FutureTask.run(FutureTask.java:273)
        at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1156)
        at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:626)
        ... 1 more
Caused by: javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.j: PKIX path 
building failed: java.security.cert.CertPathBuilderException: 
PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is: 
        java.security.cert.CertPathValidatorException: The certificate issued 
by CN=testing, L=lt, ST=mass, OU=test, O=IBM test, C=ZQ is not trusted; 
internal cause is: 
        java.security.cert.CertPathValidatorException: Certificate chaining 
error
        at com.ibm.jsse2.j.a(j.java:36)
        at com.ibm.jsse2.qc.a(qc.java:199)
        at com.ibm.jsse2.ab.a(ab.java:171)
        at com.ibm.jsse2.ab.a(ab.java:180)
        at com.ibm.jsse2.bb.a(bb.java:346)
        at com.ibm.jsse2.bb.a(bb.java:559)
        at com.ibm.jsse2.ab.r(ab.java:554)
        at com.ibm.jsse2.ab.a(ab.java:325)
        at com.ibm.jsse2.qc.a(qc.java:617)
        at com.ibm.jsse2.qc.h(qc.java:103)
        at com.ibm.jsse2.qc.a(qc.java:166)
        at com.ibm.jsse2.qc.startHandshake(qc.java:649)
        at 
org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:533)
        at 
org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:401)
        at 
org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:178)
        at 
org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:304)
        at 
org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:610)
        at 
org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:445)
        at 
org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:863)
        at 
org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)
        at 
org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:106)
        at 
org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:57)
        at 
org.apache.solr.client.solrj.impl.HttpSolrServer.request(HttpSolrServer.java:395)
        ... 9 more



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to