From solr-user-return-147158-archive-asf-public=cust-asf.ponee.io@lucene.apache.org Mon Apr 1 02:26:58 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id B18E318065D for ; Mon, 1 Apr 2019 04:26:57 +0200 (CEST) Received: (qmail 70540 invoked by uid 500); 1 Apr 2019 02:26:55 -0000 Mailing-List: contact solr-user-help@lucene.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: solr-user@lucene.apache.org Delivered-To: mailing list solr-user@lucene.apache.org Received: (qmail 70528 invoked by uid 99); 1 Apr 2019 02:26:54 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 01 Apr 2019 02:26:54 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 4B18618256C for ; Mon, 1 Apr 2019 02:26:54 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 3.166 X-Spam-Level: *** X-Spam-Status: No, score=3.166 tagged_above=-999 required=6.31 tests=[DKIM_ADSP_CUSTOM_MED=0.001, NML_ADSP_CUSTOM_MED=1.2, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_NEUTRAL=0.652, URIBL_BLOCKED=0.001, URI_HEX=1.313] autolearn=disabled Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id ZFFjUQXNYpdh for ; Mon, 1 Apr 2019 02:26:50 +0000 (UTC) Received: from n3.nabble.com (n3.nabble.com [162.255.23.22]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTP id 82A9C624F9 for ; Mon, 1 Apr 2019 02:26:50 +0000 (UTC) Received: from n3.nabble.com (localhost [127.0.0.1]) by n3.nabble.com (Postfix) with ESMTP id C4FE212F91DC8 for ; Sun, 31 Mar 2019 19:26:49 -0700 (MST) Date: Sun, 31 Mar 2019 19:26:49 -0700 (MST) From: JTytler To: solr-user@lucene.apache.org Message-ID: <1554085609769-0.post@n3.nabble.com> Subject: unable to find valid certification path to requested target MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable I have created a keystore file and have enabled SSL on my solr server using the following procedures: =20 1) Created pkcs#12 file using the command: Keytool =E2=80=93genkey =E2=80=93alias aliasname =E2=80=93keystore /solr-ss= l.keystore.pfx =E2=80=93storetype PKCS12 =E2=80=93keyalg RSA =E2=80=93storepass password =E2=80=93ext SAN=3Ddns:localhost,dns:solr-devapp01.devt1.restOfDomain =E2=80=93validity = 730 =E2=80=93keysize 2048 =20 2) Imported the pkcs keystore file into Trusted Root Certification Authorit= y =20 3) Copied the pkcs file solr-ssl.keystore.pfx to the solr /server/etc folde= r =20 4) Modified solr.in.cmd file with the following: =20 set SOLR_SSL_ENABLED=3Dtrue set SOLR_SSL_KEY_STORE=3Detc/solr-ssl.keystore.pfx set SOLR_SSL_KEY_STORE_PASSWORD=3Dsecret set SOLR_SSL_TRUST_STORE=3Detc/solr-ssl.keystore.pfx set SOLR_SSL_TRUST_STORE_PASSWORD=3Dsecret =20 set SOLR_SSL_NEED_CLIENT_AUTH=3Dfalse set SOLR_SSL_WANT_CLIENT_AUTH=3Dfalse set SOLR_SSL_KEY_STORE_TYPE=3DPKCS12 set SOLR_SSL_TRUST_STORE_TYPE=3DPKCS12 =20 =20 I can access the Solr admin at https://localhost:8983/solr and can also crawl websites using Norconex httpcrawler. However, after the documents are crawled, I am unable to commit the crawled documents into the Solr index. I get the error "unable to find valid certification path to requested target". =20 I will appreciate if someone can help me with this as this is the first tim= e I am trying to set up SSL/TLM. -- Sent from: http://lucene.472066.n3.nabble.com/Solr-User-f472068.html