# ----------------------------------------
# Addendum - passwords - character issues.
# ----------------------------------------

Per my earlier message [appended below], I should have mentioned that in 
sorting out both my Solr Basic Authentication and SSL configuration that I had 
been vexed by keystore and Solr passwords (I use a password generator) 
containing special characters (# $ etc.), that silently cause Basic 
Authentication / SSL connection issues.

Particularly, I had issue with passwords containing the number/hash/pound 
character -  #  - echoed here:

  
https://www.wpsolr.com/forums/topic/unable-to-connect-to-index-when-solr-authentication-and-authorization/

From various documentation on the web:

 ** This advice was errant: 

    
https://docs.oracle.com/cd/E14571_01/install.1111/e12002/oimscrn011.htm#INOIM1372=

    KeyStore password : a valid password can contain 6 to 30 characters, begin 
with an alphabetic character,
    and use only alphanumeric characters and special characters like underscore 
(_), dollar ($), pound (#).
    The password must contain at least one number.

 ** https://getfishtank.ca/blog/updating-ssl-certificates-in-solr

  Point of Note: when updating to Solr certificate, there's one thing you need 
to be aware of: the password should not contain any special characters.

  It's not uncommon for SSL certs to contain special characters, but Solr 
doesn't like them in the format we have to work with. It should be purely 
alpha-numeric.

  If it does, during the restart you may get a message that the service failed 
to restart. If you get that error, this is certainly something to check.

One of my original certificate p/w was apparently silently causing issues, such 
as the esoteric Solr console message:

  "... Javax.crypto.BadPaddingException:Given final block not properly padded 
solution ..."

While user passwords generated in the Solr Admin UI may caution

  Password not strong enough! Must contain at least one lowercase letter, one
  uppercase letter, one digit, and one of these special characters: 
!@#$%^&*_-[]()

As mentioned, one of my p/w contained # and so it - or the hashing/salt 
algorithm - resulted in silent errors (by silent I mean errors that gave no 
indication that the password character coding was an issue).

Here is a jetty post cautioning against the use of @ in passwords:

  https://www.eclipse.org/lists/jetty-users/msg07410.html

I would be wary of the use of non-alphanumeric "special characters" for 
keystore and Solr passwords. (If needed / concerned, one can increase the 
password length and complexity, e.g. mixed case, if concerned).

* What Are Alphanumeric Characters?
  https://studyqueries.com/alphanumeric-characters/

    Alphanumeric characters comprise the combination of the twenty-six 
characters of the alphabet (from A to Z) and the numbers 0 to 9. Therefore, 1, 
2, q, f, m, p, and 10 are all examples of alphanumeric characters. Symbols like 
*, & and @ are also considered alphanumeric characters.

    These characters can also be used in combination. Examples of alphanumeric 
characters made of the combination of special symbols, numbers, and the 
characters of the alphabet are &AF54hh, jjHF47, @qw99O. The characters of the 
alphabet can either be in lower case or upper case. The context of use 
determines whether or not case sensitivity is applied.

* See also:

 ** 
https://stackoverflow.com/questions/34675756/http-basic-authentication-fail-with-password-with-non-iso-8859-1-characters

 ** https://bz.apache.org/bugzilla/show_bug.cgi?id=48985

 ** https://bugs.openjdk.java.net/browse/JDK-6979740

 ** https://issuetracker.google.com/issues/37135737 >> ... When keytool creates 
a KeyStore or key which is protected with a password containing non-ASCII 
characters, keytool may encode the password using the console's encoding or the 
JVM default encoding instead of using the password verbatim, in its Unicode 
form. ...

 ** 
https://stackoverflow.com/questions/702629/utf-8-characters-mangled-in-http-basic-auth-username
 >> [Ruby on Rails] "... Basic Authentication and Unicode don't mix. There is 
no standard for how to encode non-ASCII characters into a Basic Authentication 
username:password token before base64ing it. Consequently every browser does 
something different: ..."

 ** https://www.searchstax.com/docs/hc/sitecore-connect-errors/

 ** https://www.searchstax.com/docs/hc/unauthorized-error/

 ** ... etc.
 
==============================================================================
----- Original Message(s): -----
Date: 2022 Apr 26 (Tue) 13:17
From: "Victoria Stuart (VictoriasJourney.com)" <m...@victoriasjourney.com>
To: Solr Community <users@solr.apache.org>
Cc: m...@victoriasjourney.com
Subject: Re: Cannot post to SSL-secured core from command line [solved]

Thanks once again to Chris [Christopher Schultz], I have solved this issue 
(solution at the end of this message).

For anyone who may benefit from it, I am posting a complete solution below.


# ============================================================================
# 1. SOLR 8.11.1 SSL CONFIGURATION
# 2. INDEXING - TESTS (http:// | https://)
# =====================================================================

[victoria@victoria docs]$ date
  2022-04-25 12:38:57 -0700 (PST)

# ============================================================================
# 1. SSL CERTIFICATES ...
# =======================

# ----------------------------------------
# REMOVE OLD CERTIFICATE FROM KEYSTORE:
# -------------------------------------

# Manually delete solr-ssl* { solr-ssl.keystore.p12 | solr-ssl-cert | ... }
# from: /mnt/Vancouver/apps/solr/solr-8.11.1/server/etc

# Delete old certificate from keystore:
# [cacerts p/w generally defaults to: changeit]

[victoria@victoria etc]$ sudo keytool -delete -trustcacerts -cacerts -storepass 
*** -noprompt -alias solr-ssl -file 
/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl-cert

[victoria@victoria etc]$


# ----------------------------------------
# GENERATE NEW CERTIFICATE [solr-ssl.keystore.p12]:
# -------------------------------------------------

# NOTES:
#   1. in this publicly-posted file: "secret" = my secret password; replace
#      "secret" with your actual password(s).
#   2. "***" below further obfuscates keytool/other data; enter your own 
values. 

[victoria@victoria etc]$ keytool -genkeypair -alias solr-ssl -keyalg RSA 
-keysize 2048 -keypass secret -storepass secret -validity 9999 -keystore 
solr-ssl.keystore.p12 -storetype PKCS12 -ext 
SAN=DNS:localhost,IP:192.168.1.3,IP:127.0.0.1 -dname "CN=***, OU=***, O=***, 
L=***, ST=***, C=***"

  Generating 2,048 bit RSA key pair and self-signed certificate (SHA256withRSA) 
with a validity of 9,999 days
    for: CN=***, OU=***, O=***, L=***, ST=***, C=***


# ----------------------------------------
# GENERATE SALTED SOLR PASSWORD HASH:
# -----------------------------------

[victoria@victoria etc]$ SALT=$(pwgen 48 -1)
[victoria@victoria etc]$ PW='secret'

[victoria@victoria etc]$ echo "hash: $(echo -n "$SALT$PW" | sha256sum -b | xxd 
-r -p | sha256sum -b | xxd -r -p | base64 -w 1024) $(echo -n "$SALT" | base64 
-w1024)"

  hash: *** ***

## Note, above; <Solr hashed [obfuscated] password> <space> <salt>

## If ever needed;

[victoria@victoria etc]$ sudo systemctl restart httpd
  [sudo] password for victoria:

[victoria@victoria etc]$ sudo systemctl status httpd

  ● httpd.service - Apache Web Server
      Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor 
preset: disabled)
      Active: active (running) since Mon 2022-04-25 19:49:01 PDT; 6s ago
    Main PID: 3284722 (httpd)
        Tasks: 82 (limit: 38359)
      Memory: 6.6M
          CPU: 21ms
      CGroup: /system.slice/httpd.service
              ├─3284722 /usr/bin/httpd -k start -DFOREGROUND
              ├─3284723 /usr/bin/httpd -k start -DFOREGROUND
              ├─3284724 /usr/bin/httpd -k start -DFOREGROUND
              └─3284725 /usr/bin/httpd -k start -DFOREGROUND

  Apr 25 19:49:01 victoria systemd[1]: Started Apache Web Server.


# ----------------------------------------
# EXPORT CERTIFICATE FROM KEYSTORE:
# ---------------------------------

[victoria@victoria etc]$ keytool -exportcert -rfc -keystore 
solr-ssl.keystore.p12  -alias solr-ssl -file solr-ssl-cert

  Enter keystore password:      ## secret
  Certificate stored in file <solr-ssl-cert>

[victoria@victoria etc]$ cat solr-ssl-cert

  -----BEGIN CERTIFICATE-----
  ***
  -----END CERTIFICATE-----


# ----------------------------------------
# ADD CERTIFICATE TO JAVA TRUST STORE (cacerts):
# ----------------------------------------------

## cacerts p/w generally defaults to: changeit

[victoria@victoria etc]$ sudo keytool -import -trustcacerts -cacerts -storepass 
*** -noprompt -alias solr-ssl -file 
/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl-cert

  Certificate was added to keystore

[victoria@victoria etc]$


# ----------------------------------------
# VERIFY KEYSTORE ADDITION:
# -------------------------

[victoria@victoria etc]$ keytool -list -cacerts | grep solr-ssl

  Enter keystore password:  ***
  solr-ssl, Apr 25, 2022, trustedCertEntry,

[victoria@victoria etc]$ keytool -list -keystore 
$JAVA_HOME/lib/security/cacerts | grep -i solr

  Warning: use -cacerts option to access cacerts keystore
  Enter keystore password:  ***
  solr-ssl, Apr 25, 2022, trustedCertEntry, 

[victoria@victoria etc]$ 

# ----------------------------------------
## Note: given the following [default installed] symlink,

  [victoria@victoria solr-8.11.1]$ ls -l $JAVA_HOME/lib/security/cacerts
    lrwxrwxrwx 1 root root 27 Apr 19 16:46 
/usr/lib/jvm/java-18-openjdk//lib/security/cacerts -> 
/etc/ssl/certs/java/cacerts

  [victoria@victoria solr-8.11.1]$

  [victoria@victoria solr-8.11.1]$ keytool -list -keystore 
$JAVA_HOME/lib/security/cacerts | grep -i solr
    Warning: use -cacerts option to access cacerts keystore
    Enter keystore password:  ***
    solr-ssl, Apr 24, 2022, trustedCertEntry, 

  [victoria@victoria solr-8.11.1]$ 

## ... importing the SSL certificate to $JAVA_HOME is not needed.

  ## old method [not needed / not done]:
    sudo keytool -import -file 
/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.pem -alias solr-ssl 
-keystore $JAVA_HOME/lib/security/cacerts 

  ## updated method [not needed / not done]:
    sudo keytool -import -alias solr-ssl -file 
/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl-cert -keystore 
$JAVA_HOME/lib/security/cacerts 

## Check [certificate present due to symlink, above]:

  [victoria@victoria solr-8.11.1]$ sudo keytool -import -alias solr-ssl -file 
/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl-cert -keystore 
$JAVA_HOME/lib/security/cacerts

    [sudo] password for victoria: 
    Warning: use -cacerts option to access cacerts keystore
    Enter keystore password:        ## ***
    keytool error: java.lang.Exception: Certificate not imported, alias 
<solr-ssl> already exists

  [victoria@victoria solr-8.11.1]$ 


# ============================================================================
# 2. INDEX DOCUMENTS TO SSL-HARDENED SOLR
# =======================================

[victoria@victoria scripts]$ date
  2022-04-25 12:40:29 -0700 (PST)

[victoria@victoria scripts]$ apachectl configtest
  Syntax OK

[victoria@victoria etc]$ pwd; ls -l

  /mnt/Vancouver/apps/solr/solr-8.11.1/server/etc
  total 84K
  -rw-r--r-- 1 victoria victoria 2.0K Dec  7 17:01 jetty-gzip.xml
  -rw-r--r-- 1 victoria victoria 3.6K Dec  7 17:01 jetty-https8.xml
  -rw-r--r-- 1 victoria victoria 3.7K Dec  7 17:01 jetty-https.xml
  -rw-r--r-- 1 victoria victoria 2.7K Dec  7 17:01 jetty-http.xml
  -rw-r--r-- 1 victoria victoria 1.9K Dec  7 17:01 jetty-requestlog.xml
  -rw-r--r-- 1 victoria victoria 2.7K Apr 22 11:27 jetty-ssl.xml
  -rw-r--r-- 1 victoria victoria  12K Apr 23 12:20 jetty.xml
  -rw-r--r-- 1 victoria victoria  12K Dec  7 17:01 security.policy
  -rw-r--r-- 1 victoria victoria 1.3K Dec  7 17:01 security.properties
  -rw-r--r-- 1 victoria victoria 1.4K Apr 19 19:28 solr-ssl-cert
  -rw-r--r-- 1 victoria victoria 2.8K Apr 19 19:27 solr-ssl.keystore.p12
  -rw-r--r-- 1 victoria victoria  24K Dec  7 17:01 webdefault.xml

[victoria@victoria solr]$


# ----------------------------------------
# PATHS:
# ------

[victoria@victoria solr]$ echo $SOLR_JAVA_HOME/
  /usr/lib/jvm/java-18-openjdk//

[victoria@victoria solr]$ echo $PATH | sed 's/:/\n/g' | grep solr
  /mnt/Vancouver/apps/solr/solr-8.11.1/bin/

[victoria@victoria solr]$


# ----------------------------------------
# solr.in.sh :
# ------------

## Note: basic authentication allows access to SSL-protected Solr from the 
console / command-line.

  SOLR_SSL_ENABLED=true

  
SOLR_SSL_KEY_STORE=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
  SOLR_SSL_KEY_STORE_PASSWORD=secret
  SOLR_SSL_KEY_STORE_TYPE=PKCS12

  
SOLR_SSL_TRUST_STORE=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
  SOLR_SSL_TRUST_STORE_PASSWORD=secret
  SOLR_SSL_TRUST_STORE_TYPE=PKCS12

  SOLR_AUTH_TYPE="basic"
  SOLR_AUTHENTICATION_OPTS="-Dbasicauth=pg-solr-admin:secret"

  SOLR_SSL_NEED_CLIENT_AUTH=false
  SOLR_SSL_WANT_CLIENT_AUTH=false

  SOLR_SSL_CLIENT_HOSTNAME_VERIFICATION=true

  SOLR_SSL_CHECK_PEER_NAME=true


# ----------------------------------------
# security.json [note: p/w obfuscated (removed), below]:
# ------------------------------------------------------

  {
    "authentication":{
      "blockUnknown":true,
      "class":"solr.BasicAuthPlugin",
      "credentials":{"pg-solr-admin":"***"},
      "realm":"Persagen",
      "forwardCredentials":false},
    "authorization":{
      "class":"solr.RuleBasedAuthorizationPlugin",
      "permissions":[
        {
          "name":"security-edit",
          "role":"admin",
          "index":1},
        {
          "name":"schema-read",
          "role":["admin"],
          "index":2},
        {
          "name":"security-read",
          "role":["admin"],
          "index":3},
        {
          "name":"all",
          "role":["admin"],
          "index":4}],
      "user-role":{"pg-solr-admin":["admin"]},
      "":{"v":0}}}


# ----------------------------------------
# JAVA VERSIONS:
# ---------------

[victoria@victoria solr]$ which java
  /usr/bin/java

[victoria@victoria solr]$ whereis java
  java: /usr/bin/java /usr/share/java /usr/lib/jvm/java-18-openjdk/bin/java 
/usr/share/man/man1/java.1.gz

[victoria@victoria solr]$


# ----------------------------------------
# SOLR INDEXING (old, for reference; note: http://...):
# -----------------------------------------------------

  /usr/lib/jvm/java-8-openjdk/jre//bin/java -classpath 
/mnt/Vancouver/apps/solr/solr-8.7.0/dist/solr-core-8.7.0.jar -Dauto=yes 
-Dc=core0 -Ddata=files org.apache.solr.util.SimplePostTool 
/mnt/Vancouver/programming/datasci/solr/test/d1.html 
/mnt/Vancouver/programming/datasci/solr/test/d2.html 
/mnt/Vancouver/programming/datasci/solr/test/d3.html 
/mnt/Vancouver/programming/datasci/solr/test/d4.html

  /usr/lib/jvm/java-8-openjdk/jre//bin/java
  -classpath /mnt/Vancouver/apps/solr/solr-8.7.0/dist/solr-core-8.7.0.jar
  -Dauto=yes
  -Dc=core0
  -Ddata=files
  org.apache.solr.util.SimplePostTool
  /mnt/Vancouver/programming/datasci/solr/test/d1.html
  /mnt/Vancouver/programming/datasci/solr/test/d2.html
  /mnt/Vancouver/programming/datasci/solr/test/d3.html
  /mnt/Vancouver/programming/datasci/solr/test/d4.html


# ----------------------------------------
# SOLR ADMIN UI (HINTS FOR PARAMETRIZATION):
# https://localhost:8983/solr/#/
# ------------------------------------------

  -DSTOP.KEY=solrrocks
  -DSTOP.PORT=7983
  -Dbasicauth=pg-solr-admin:secret
  
-Djavax.net.ssl.keyStore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
  -Djavax.net.ssl.keyStoreType=PKCS12
  [ ... snip ... ]
  -Xms2048m
  -Xmx2048m
  -Xss256k


## NOTE: I want to run multiple Solr cores, and I am indexing HTML pages,
## metadata  using bespoke { solrconfig.xml | schema.xml } files.
## For simplicity/testing, I temporarily moved to those *.xml files to:
##   /mnt/Vancouver/apps/solr/solr-8.11.1/server/solr/configsets/_default/conf/


# ----------------------------------------------------------------------------
# DELETE OLD CONTENT (SOLR ADMIN UI; XML DOCUMENT TYPE):
# ------------------------------------------------------
  
    <delete><query>*:*</query></delete>


# ----------------------------------------
# COMMAND-LINE POST TO SOLR:
# --------------------------

## Template:

  /usr/lib/jvm/java-18-openjdk/bin/java \
  -classpath /mnt/Vancouver/apps/solr/solr-8.11.1/dist/solr-core-8.11.1.jar \
  -Dbasicauth=pg-solr-admin:secret \
  
-Dsolr.default.confdir=/mnt/Vancouver/apps/solr/solr-8.11.1/server/solr/configsets/_default/conf/
 \
  
-Djavax.net.ssl.keyStore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 \
  -Djavax.net.ssl.keyStoreType=PKCS12 \
  -Djavax.net.ssl.keyStorePassword=secret \
  
-Djavax.net.ssl.trustStore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 \
  -Djavax.net.ssl.trustStoreType=PKCS12 \
  -Djavax.net.ssl.trustStorePassword=secret \
  -Djetty.home=/mnt/Vancouver/apps/solr/solr-8.11.1/server \
  -Djetty.port=8983 \
  -Dsolr.jetty.https.port=8983 \
  -Dsolr.jetty.keystore.type=PKCS12 \
  
-Dsolr.jetty.keystore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 \
  -Dsolr.jetty.ssl.needClientAuth=false \
  -Dsolr.jetty.ssl.wantClientAuth=false \
  -Dsolr.jetty.truststore.type=PKCS12 \
  
-Dsolr.jetty.truststore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 \
  -Dsolr.solr.home=/mnt/Vancouver/apps/solr/solr-8.11.1/server/solr \
  -Dauto=yes \
  -Dc=pg-solr \
  -Durl=https://localhost:8983/solr/pg-solr/update \
  -Ddata=files \
  org.apache.solr.util.SimplePostTool \
  /mnt/Vancouver/domains/persagen/05/docs-test_copies/jeff_bezos.html


# ----------------------------------------
# INDEX DOCUMENT TO "pg-solr" CORE [SUCCESS! 😀]
# ----------------------------------------------

[victoria@victoria solr]$ solr status

  Found 1 Solr nodes:

  Solr process 272444 running on port 8983
  INFO  - 2022-04-26 10:26:55.684; 
org.apache.solr.util.configuration.SSLConfigurations; Setting 
javax.net.ssl.keyStorePassword
  INFO  - 2022-04-26 10:26:55.686; 
org.apache.solr.util.configuration.SSLConfigurations; Setting 
javax.net.ssl.trustStorePassword
  {
    "solr_home":"/mnt/Vancouver/apps/solr/solr-8.11.1/server/solr",
    "version":"8.11.1 0b002b11819df70783e83ef36b42ed1223c14b50 - janhoy - 
2021-12-14 13:50:55",
    "startTime":"2022-04-26T16:27:45.310Z",
    "uptime":"0 days, 0 hours, 59 minutes, 10 seconds",
    "memory":"251.5 MB (%12.3) of 2 GB"}

[victoria@victoria solr]$

## POST HTML DOCUMENT:

[victoria@victoria solr]$ /usr/lib/jvm/java-18-openjdk/bin/java \
  -classpath /mnt/Vancouver/apps/solr/solr-8.11.1/dist/solr-core-8.11.1.jar \
  -Dbasicauth=pg-solr-admin:secret \
  
-Dsolr.default.confdir=/mnt/Vancouver/apps/solr/solr-8.11.1/server/solr/configsets/_default/conf/
 \
  
-Djavax.net.ssl.keyStore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 \
  -Djavax.net.ssl.keyStoreType=PKCS12 \
  -Djavax.net.ssl.keyStorePassword=secret \
  
-Djavax.net.ssl.trustStore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 \
  -Djavax.net.ssl.trustStoreType=PKCS12 \
  -Djavax.net.ssl.trustStorePassword=secret \
  -Djetty.home=/mnt/Vancouver/apps/solr/solr-8.11.1/server \
  -Djetty.port=8983 \
  -Dsolr.jetty.https.port=8983 \
  -Dsolr.jetty.keystore.type=PKCS12 \
  
-Dsolr.jetty.keystore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 \
  -Dsolr.jetty.ssl.needClientAuth=false \
  -Dsolr.jetty.ssl.wantClientAuth=false \
  -Dsolr.jetty.truststore.type=PKCS12 \
  
-Dsolr.jetty.truststore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 \
  -Dsolr.solr.home=/mnt/Vancouver/apps/solr/solr-8.11.1/server/solr \
  -Dauto=yes \
  -Dc=pg-solr \
  -Durl=https://localhost:8983/solr/pg-solr/update \
  -Ddata=files \
  org.apache.solr.util.SimplePostTool \
  /mnt/Vancouver/domains/persagen/05/docs-test_copies/jeff_bezos.html

  SimplePostTool version 5.0.0
  Basic Authentication enabled, user=pg-solr-admin
  Posting files to [base] url https://localhost:8983/solr/pg-solr/update...
  Entering auto mode. File endings considered are 
xml,json,jsonl,csv,pdf,doc,docx,ppt,pptx,xls,xlsx,odt,odp,ods,ott,otp,ots,rtf,htm,html,txt,log
  POSTing file jeff_bezos.html (text/html) to [base]/extract
  1 files indexed.
  COMMITting Solr index changes to https://localhost:8983/solr/pg-solr/update...
  Time spent: 0:00:01.214

# ----------------------------------------
# REPEAT (TEST: DID NOT DUPLICATE EXISTING INDEXED ENTRY 👍):
# -----------------------------------------------------------

[victoria@victoria solr]$ /usr/lib/jvm/java-18-openjdk/bin/java -classpath 
/mnt/Vancouver/apps/solr/solr-8.11.1/dist/solr-core-8.11.1.jar 
-Dbasicauth=pg-solr-admin:secret 
-Dsolr.default.confdir=/mnt/Vancouver/apps/solr/solr-8.11.1/server/solr/configsets/_default/conf/
 
-Djavax.net.ssl.keyStore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 -Djavax.net.ssl.keyStoreType=PKCS12 -Djavax.net.ssl.keyStorePassword=secret 
-Djavax.net.ssl.trustStore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 -Djavax.net.ssl.trustStoreType=PKCS12 
-Djavax.net.ssl.trustStorePassword=secret 
-Djetty.home=/mnt/Vancouver/apps/solr/solr-8.11.1/server -Djetty.port=8983 
-Dsolr.jetty.https.port=8983 -Dsolr.jetty.keystore.type=PKCS12 
-Dsolr.jetty.keystore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 -Dsolr.jetty.ssl.needClientAuth=false -Dsolr.jetty.ssl.wantClientAuth=false 
-Dsolr.jetty.truststore.type=PKCS12 
-Dsolr.jetty.truststore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 -Dsolr.solr.home=/mnt/Vancouver/apps/solr/solr-8.11.1/server/solr -Dauto=yes 
-Dc=pg-solr -Durl=https://localhost:8983/solr/pg-solr/update -Ddata=files 
org.apache.solr.util.SimplePostTool 
/mnt/Vancouver/domains/persagen/05/docs-test_copies/jeff_bezos.html

  SimplePostTool version 5.0.0
  Basic Authentication enabled, user=pg-solr-admin
  Posting files to [base] url https://localhost:8983/solr/pg-solr/update...
  Entering auto mode. File endings considered are 
xml,json,jsonl,csv,pdf,doc,docx,ppt,pptx,xls,xlsx,odt,odp,ods,ott,otp,ots,rtf,htm,html,txt,log
  POSTing file jeff_bezos.html (text/html) to [base]/extract
  1 files indexed.
  COMMITting Solr index changes to https://localhost:8983/solr/pg-solr/update...
  Time spent: 0:00:02.336

[victoria@victoria solr]$


# ----------------------------------------------------------------------------
# CREATE NEW SOLR CORE:
# ---------------------

[victoria@victoria solr]$ solr create -c pg-solr-demo

  WARNING: Using _default configset with data driven schema functionality. NOT 
RECOMMENDED for production use.
          To turn off: bin/solr config -c pg-solr-demo -p 8983 -action 
set-user-property -property update.autoCreateFields -value false
  INFO  - 2022-04-26 11:22:02.802; 
org.apache.solr.util.configuration.SSLConfigurations; Setting 
javax.net.ssl.keyStorePassword
  INFO  - 2022-04-26 11:22:02.804; 
org.apache.solr.util.configuration.SSLConfigurations; Setting 
javax.net.ssl.trustStorePassword

  Created new core 'pg-solr-demo'

[victoria@victoria solr]$ solr restart

  Sending stop command to Solr running on port 8983 ... waiting up to 45 
seconds to allow Jetty process 272444 to stop gracefully.
  Waiting up to 45 seconds to see Solr running on port 8983 [|]
  Started Solr server on port 8983 (pid=446422). Happy searching!

[victoria@victoria solr]$ solr status

  Found 1 Solr nodes:

  Solr process 446422 running on port 8983
  INFO  - 2022-04-26 11:22:25.221; 
org.apache.solr.util.configuration.SSLConfigurations; Setting 
javax.net.ssl.keyStorePassword
  INFO  - 2022-04-26 11:22:25.223; 
org.apache.solr.util.configuration.SSLConfigurations; Setting 
javax.net.ssl.trustStorePassword
  {
    "solr_home":"/mnt/Vancouver/apps/solr/solr-8.11.1/server/solr",
    "version":"8.11.1 0b002b11819df70783e83ef36b42ed1223c14b50 - janhoy - 
2021-12-14 13:50:55",
    "startTime":"2022-04-26T18:22:12.715Z",
    "uptime":"0 days, 0 hours, 0 minutes, 13 seconds",
    "memory":"54.2 MB (%2.6) of 2 GB"}

[victoria@victoria solr]$

# ----------------------------------------------------------------------------
# INDEX NEW DOCUMENT TO ORIGINAL CORE [pg-solr]:
# ----------------------------------------------

[victoria@victoria solr]$ /usr/lib/jvm/java-18-openjdk/bin/java -classpath 
/mnt/Vancouver/apps/solr/solr-8.11.1/dist/solr-core-8.11.1.jar 
-Dbasicauth=pg-solr-admin:secret 
-Dsolr.default.confdir=/mnt/Vancouver/apps/solr/solr-8.11.1/server/solr/configsets/_default/conf/
 
-Djavax.net.ssl.keyStore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 -Djavax.net.ssl.keyStoreType=PKCS12 -Djavax.net.ssl.keyStorePassword=secret 
-Djavax.net.ssl.trustStore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 -Djavax.net.ssl.trustStoreType=PKCS12 
-Djavax.net.ssl.trustStorePassword=secret 
-Djetty.home=/mnt/Vancouver/apps/solr/solr-8.11.1/server -Djetty.port=8983 
-Dsolr.jetty.https.port=8983 -Dsolr.jetty.keystore.type=PKCS12 
-Dsolr.jetty.keystore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 -Dsolr.jetty.ssl.needClientAuth=false -Dsolr.jetty.ssl.wantClientAuth=false 
-Dsolr.jetty.truststore.type=PKCS12 
-Dsolr.jetty.truststore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 -Dsolr.solr.home=/mnt/Vancouver/apps/solr/solr-8.11.1/server/solr -Dauto=yes 
-Dc=pg-solr -Durl=https://localhost:8983/solr/pg-solr/update -Ddata=files 
org.apache.solr.util.SimplePostTool 
/mnt/Vancouver/domains/persagen/05/docs-test_copies/greg_abbott.html

  SimplePostTool version 5.0.0
  Basic Authentication enabled, user=pg-solr-admin
  Posting files to [base] url https://localhost:8983/solr/pg-solr/update...
  Entering auto mode. File endings considered are 
xml,json,jsonl,csv,pdf,doc,docx,ppt,pptx,xls,xlsx,odt,odp,ods,ott,otp,ots,rtf,htm,html,txt,log
  POSTing file greg_abbott.html (text/html) to [base]/extract
  1 files indexed.
  COMMITting Solr index changes to https://localhost:8983/solr/pg-solr/update...
  Time spent: 0:00:02.287

[victoria@victoria solr]$


# ----------------------------------------------------------------------------
# INDEX NEW DOCUMENT TO NEW CORE [pg-solr-demo]:
# ----------------------------------------------

[victoria@victoria solr]$ /usr/lib/jvm/java-18-openjdk/bin/java -classpath 
/mnt/Vancouver/apps/solr/solr-8.11.1/dist/solr-core-8.11.1.jar 
-Dbasicauth=pg-solr-admin:secret 
-Dsolr.default.confdir=/mnt/Vancouver/apps/solr/solr-8.11.1/server/solr/configsets/_default/conf/
 
-Djavax.net.ssl.keyStore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 -Djavax.net.ssl.keyStoreType=PKCS12 -Djavax.net.ssl.keyStorePassword=secret 
-Djavax.net.ssl.trustStore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 -Djavax.net.ssl.trustStoreType=PKCS12 
-Djavax.net.ssl.trustStorePassword=secret 
-Djetty.home=/mnt/Vancouver/apps/solr/solr-8.11.1/server -Djetty.port=8983 
-Dsolr.jetty.https.port=8983 -Dsolr.jetty.keystore.type=PKCS12 
-Dsolr.jetty.keystore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 -Dsolr.jetty.ssl.needClientAuth=false -Dsolr.jetty.ssl.wantClientAuth=false 
-Dsolr.jetty.truststore.type=PKCS12 
-Dsolr.jetty.truststore=/mnt/Vancouver/apps/solr/solr-8.11.1/server/etc/solr-ssl.keystore.p12
 -Dsolr.solr.home=/mnt/Vancouver/apps/solr/solr-8.11.1/server/solr -Dauto=yes 
-Dc=pg-solr -Durl=https://localhost:8983/solr/pg-solr-demo/update -Ddata=files 
org.apache.solr.util.SimplePostTool 
/mnt/Vancouver/domains/persagen/05/docs-test_copies/neofascism.html

  SimplePostTool version 5.0.0
  Basic Authentication enabled, user=pg-solr-admin
  Posting files to [base] url https://localhost:8983/solr/pg-solr-demo/update...
  Entering auto mode. File endings considered are 
xml,json,jsonl,csv,pdf,doc,docx,ppt,pptx,xls,xlsx,odt,odp,ods,ott,otp,ots,rtf,htm,html,txt,log
  POSTing file neofascism.html (text/html) to [base]/extract
  1 files indexed.
  COMMITting Solr index changes to 
https://localhost:8983/solr/pg-solr-demo/update...
  Time spent: 0:00:01.715

[victoria@victoria solr]$ 

# ----------------------------------------------------------------------------

## Q.E.D  😅

# ============================================================================
==============================================================================

Reply via email to