Re: Solr not accessible - javax.net.ssl.SSLException

2018-02-23 Thread Shawn Heisey 

On 2/22/2018 11:16 PM, protonmail4us wrote:
ERROR: Failed to get system information from 
https://localhost:8282/solr due to: javax.net.ssl.SSLException: 
Certificate for doesn't match any of the subject alternative names: 
[*.ishippo.com, ishippo.com]


It says the certificate is valid for *.ishippo.com and ishippo.com ... 
but the message says that the hostname in the URL being used is 
localhost.  That's not going to work unless you disable certificate 
validation.


If this message is in the server log and you're running SolrCloud, then 
you're going to have to change the "host" parameter that Solr uses to 
register itself with the cloud information in zookeeper, so that it is 
using a hostname that the certificate covers.


If the message is coming from client code, you're going to need to 
change the URL in the client code.


Thanks,
Shawn

Solr not accessible - javax.net.ssl.SSLException

2018-02-22 Thread protonmail4us 
Greetings, Apache Solr community.

I'm here to ask for your help and advice about a Solr-related problem I'm 
having.

My company is an e-commerce website and uses Solr in production for the 
querying of items in our inventory. The Solr installation was done by an 
engineer who has left the company. About 2 weeks ago, Solr stopped working 
completely (our website wasn't rendering completely and we lost the search 
functionality).

We also couldn't access the Solr dashboard, located in our server at 
[https://api.ishippo.com:8282/solr/#](https://api.mydomain.com:8282/solr/#)

(NB - Solr runs on ports 8282 in our server.)

I logged onto the remote server where Solr was installed and ran
> bin/solr status

I got this message -
Found 1 Solr nodes:

Solr process 4365 running on port 8282

ERROR: Failed to get system information from https://localhost:8282/solr due 
to: javax.net.ssl.SSLException: Certificate for doesn't match any of the 
subject alternative names: [*.ishippo.com, ishippo.com]

We figured that it could be an SSL issue and tried accessing the Solr dashboard 
through plain HTTP by plugging in our server's IP address. This time, we could 
access the Solr dashboard. But our website works solely by https, so the Solr 
query gets blocked every time.

It seems that only https connections are being blocked by Solr and its port 
(8282). Everything works fine on the other ports, and on http.

We contacted our SSL certificate authority, and they said everything was fine 
from their end. They even made us perform openssl tests and send them the 
output. but they couldn't find anything cause from their end. (I have the 
openssl messages returned from the tests, which are long. I can share them if 
someone needs it)

What could be the issue here? I have tried so many things in order to fix this 
to no avail. Does anybody know what's going on and help a user out?

Thank you for your patience,
iShippo

Here is a summary of the problem -

- Solr dashboard (located on https://api.ishippo.com:8282/solr/#) is not 
accessible.
- Only port 8282 (which Solr runs on is affected).  Services also running on 
api.ishippo.com on other ports are running fine.
- Solr throws a javax.net.ssl.SSLException error.

- We discover we are able to access the Solr dashboard by looking up the IP 
address of our server (and not the URL) on http 
(http://52.66.65.108:8282/solr/#)
- Our platform runs soleley on HTTPS, so we're not able to go around it by 
using http.
- Our SSL certificate authority couldn't find a cause on their end.