Skip to content

Instantly share code, notes, and snippets.

@janhoy
Created December 19, 2019 13:37
Show Gist options
  • Save janhoy/085cafb645f11eaa2a91bd2114a71692 to your computer and use it in GitHub Desktop.
Save janhoy/085cafb645f11eaa2a91bd2114a71692 to your computer and use it in GitHub Desktop.
Solr SSL Kevin patch
*** [WARN] *** Your open file limit is currently 256.
It should be set to 65000 to avoid operational disruption.
If you no longer wish to see this warning, set SOLR_ULIMIT_CHECKS to false in your profile or solr.in.sh
*** [WARN] *** Your Max Processes Limit is currently 5568.
It should be set to 65000 to avoid operational disruption.
If you no longer wish to see this warning, set SOLR_ULIMIT_CHECKS to false in your profile or solr.in.sh
OpenJDK 64-Bit Server VM warning: -XX:+UseLargePages not supported in this VM
2019-12-19 13:33:43.711 INFO (main) [ ] o.e.j.u.log Logging initialized @1009ms to org.eclipse.jetty.util.log.Slf4jLog
2019-12-19 13:33:43.898 INFO (main) [ ] o.e.j.s.Server jetty-9.4.24.v20191120; built: 2019-11-20T21:37:49.771Z; git: 363d5f2df3a8a28de40604320230664b9c793c16; jvm 11.0.5+10
2019-12-19 13:33:43.913 INFO (main) [ ] o.e.j.d.p.ScanningAppProvider Deployment monitor [file:///Users/janhoy/git/lucene-solr/solr/server/contexts/] at interval 0
2019-12-19 13:33:44.098 INFO (main) [ ] o.e.j.w.StandardDescriptorProcessor NO JSP Support for /solr, did not find org.apache.jasper.servlet.JspServlet
2019-12-19 13:33:44.104 INFO (main) [ ] o.e.j.s.session DefaultSessionIdManager workerName=node0
2019-12-19 13:33:44.104 INFO (main) [ ] o.e.j.s.session No SessionScavenger set, using defaults
2019-12-19 13:33:44.106 INFO (main) [ ] o.e.j.s.session node0 Scavenging every 600000ms
2019-12-19 13:33:44.144 INFO (main) [ ] o.a.s.u.c.SSLConfigurations Setting javax.net.ssl.keyStorePassword
2019-12-19 13:33:44.145 INFO (main) [ ] o.a.s.u.c.SSLConfigurations Setting javax.net.ssl.trustStorePassword
2019-12-19 13:33:44.154 INFO (main) [ ] o.a.s.s.SolrDispatchFilter Using logger factory org.apache.logging.slf4j.Log4jLoggerFactory
2019-12-19 13:33:44.163 INFO (main) [ ] o.a.s.s.SolrDispatchFilter ___ _ Welcome to Apache Solr™ version 9.0.0-SNAPSHOT bb8e115c2f992322c668746e6546dfea77ce0f86 - janhoy - 2019-12-19 14:30:10
2019-12-19 13:33:44.163 INFO (main) [ ] o.a.s.s.SolrDispatchFilter / __| ___| |_ _ Starting in standalone mode on port 8983
2019-12-19 13:33:44.163 INFO (main) [ ] o.a.s.s.SolrDispatchFilter \__ \/ _ \ | '_| Install dir: /Users/janhoy/dips/solrssl/lucene-solr/solr
2019-12-19 13:33:44.163 INFO (main) [ ] o.a.s.s.SolrDispatchFilter |___/\___/_|_| Start time: 2019-12-19T13:33:44.163726Z
2019-12-19 13:33:44.194 INFO (main) [ ] o.a.s.c.SolrResourceLoader Using system property solr.solr.home: /Users/janhoy/dips/solrssl/lucene-solr/solr/server/solr
2019-12-19 13:33:44.199 INFO (main) [ ] o.a.s.c.SolrXmlConfig Loading container configuration from /Users/janhoy/dips/solrssl/lucene-solr/solr/server/solr/solr.xml
2019-12-19 13:33:44.270 INFO (main) [ ] o.a.s.c.SolrXmlConfig MBean server found: com.sun.jmx.mbeanserver.JmxMBeanServer@56928307, but no JMX reporters were configured - adding default JMX reporter.
2019-12-19 13:33:44.653 INFO (main) [ ] o.a.s.h.c.HttpShardHandlerFactory Host whitelist initialized: WhitelistHostChecker [whitelistHosts=null, whitelistHostCheckingEnabled=true]
2019-12-19 13:33:44.745 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@1907874b(idp_hf1,h=[vt-for1-ping01.foretak1.test, vt-for1-ping01],w=[]) for Client@767191b1[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks]
2019-12-19 13:33:44.745 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@34d52ecd(idp_regional,h=[vt-reg-ping01.regional.test],w=[]) for Client@767191b1[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks]
2019-12-19 13:33:44.745 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@5d21202d(solr-ssl,h=[localhost, vt-docker01, vt-docker02],w=[]) for Client@767191b1[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks]
2019-12-19 13:33:44.746 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@14b789f6(vtsearchln01t9,h=[vt-searchln01.dips.local, vt-searchln02.dips.local, vt-searchln03.dips.local, vt-searchln04.dips.local, vt-searchln05.dips.local, vt-searchln06.dips.local, vt-searchln07.dips.local, vt-searchln08.dips.local, vt-searchln09.dips.local, vt-searchln01t9.dips.local],w=[]) for Client@767191b1[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks]
2019-12-19 13:33:44.748 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@6eb17ec8(vt-sno-journ07,h=[vt-sno-journ07],w=[]) for Client@767191b1[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks]
2019-12-19 13:33:44.748 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@730f9695(idp_hf2,h=[vt-for2-ping01.foretak2.test, vt-for2-ping01],w=[]) for Client@767191b1[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks]
2019-12-19 13:33:44.769 ERROR (main) [ ] o.a.s.s.SolrDispatchFilter Could not start Solr. Check solr/home property and the logs
2019-12-19 13:33:44.791 ERROR (main) [ ] o.a.s.c.SolrCore null:org.apache.solr.common.SolrException: Error instantiating shardHandlerFactory class [HttpShardHandlerFactory]: java.lang.UnsupportedOperationException: X509ExtendedKeyManager only supported on Server
at org.apache.solr.handler.component.ShardHandlerFactory.newInstance(ShardHandlerFactory.java:56)
at org.apache.solr.core.CoreContainer.load(CoreContainer.java:632)
at org.apache.solr.servlet.SolrDispatchFilter.createCoreContainer(SolrDispatchFilter.java:262)
at org.apache.solr.servlet.SolrDispatchFilter.init(SolrDispatchFilter.java:182)
at org.eclipse.jetty.servlet.FilterHolder.initialize(FilterHolder.java:134)
at org.eclipse.jetty.servlet.ServletHandler.lambda$initialize$0(ServletHandler.java:751)
at java.base/java.util.Spliterators$ArraySpliterator.forEachRemaining(Spliterators.java:948)
at java.base/java.util.stream.Streams$ConcatSpliterator.forEachRemaining(Streams.java:734)
at java.base/java.util.stream.Streams$ConcatSpliterator.forEachRemaining(Streams.java:734)
at java.base/java.util.stream.ReferencePipeline$Head.forEach(ReferencePipeline.java:658)
at org.eclipse.jetty.servlet.ServletHandler.initialize(ServletHandler.java:744)
at org.eclipse.jetty.servlet.ServletContextHandler.startContext(ServletContextHandler.java:360)
at org.eclipse.jetty.webapp.WebAppContext.startWebapp(WebAppContext.java:1445)
at org.eclipse.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1409)
at org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:822)
at org.eclipse.jetty.servlet.ServletContextHandler.doStart(ServletContextHandler.java:275)
at org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:524)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at org.eclipse.jetty.deploy.bindings.StandardStarter.processBinding(StandardStarter.java:46)
at org.eclipse.jetty.deploy.AppLifeCycle.runBindings(AppLifeCycle.java:188)
at org.eclipse.jetty.deploy.DeploymentManager.requestAppGoal(DeploymentManager.java:513)
at org.eclipse.jetty.deploy.DeploymentManager.addApp(DeploymentManager.java:154)
at org.eclipse.jetty.deploy.providers.ScanningAppProvider.fileAdded(ScanningAppProvider.java:173)
at org.eclipse.jetty.deploy.providers.WebAppProvider.fileAdded(WebAppProvider.java:447)
at org.eclipse.jetty.deploy.providers.ScanningAppProvider$1.fileAdded(ScanningAppProvider.java:66)
at org.eclipse.jetty.util.Scanner.reportAddition(Scanner.java:784)
at org.eclipse.jetty.util.Scanner.reportDifferences(Scanner.java:753)
at org.eclipse.jetty.util.Scanner.scan(Scanner.java:641)
at org.eclipse.jetty.util.Scanner.doStart(Scanner.java:540)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at org.eclipse.jetty.deploy.providers.ScanningAppProvider.doStart(ScanningAppProvider.java:146)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at org.eclipse.jetty.deploy.DeploymentManager.startAppProvider(DeploymentManager.java:599)
at org.eclipse.jetty.deploy.DeploymentManager.doStart(DeploymentManager.java:249)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at org.eclipse.jetty.server.Server.start(Server.java:407)
at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:100)
at org.eclipse.jetty.server.Server.doStart(Server.java:371)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at org.eclipse.jetty.xml.XmlConfiguration.lambda$main$0(XmlConfiguration.java:1888)
at java.base/java.security.AccessController.doPrivileged(Native Method)
at org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1837)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:566)
at org.eclipse.jetty.start.Main.invokeMain(Main.java:218)
at org.eclipse.jetty.start.Main.start(Main.java:491)
at org.eclipse.jetty.start.Main.main(Main.java:77)
Caused by: java.lang.RuntimeException: java.lang.UnsupportedOperationException: X509ExtendedKeyManager only supported on Server
at org.apache.solr.client.solrj.impl.Http2SolrClient.createHttpClient(Http2SolrClient.java:223)
at org.apache.solr.client.solrj.impl.Http2SolrClient.<init>(Http2SolrClient.java:153)
at org.apache.solr.client.solrj.impl.Http2SolrClient$Builder.build(Http2SolrClient.java:832)
at org.apache.solr.handler.component.HttpShardHandlerFactory.init(HttpShardHandlerFactory.java:323)
at org.apache.solr.handler.component.ShardHandlerFactory.newInstance(ShardHandlerFactory.java:51)
... 50 more
Caused by: java.lang.UnsupportedOperationException: X509ExtendedKeyManager only supported on Server
at org.eclipse.jetty.util.ssl.SslContextFactory.newSniX509ExtendedKeyManager(SslContextFactory.java:1273)
at org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1255)
at org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:374)
at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:245)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
at org.eclipse.jetty.client.HttpClient.doStart(HttpClient.java:244)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at org.apache.solr.client.solrj.impl.Http2SolrClient.createHttpClient(Http2SolrClient.java:221)
... 54 more
2019-12-19 13:33:44.810 INFO (main) [ ] o.e.j.s.h.ContextHandler Started o.e.j.w.WebAppContext@5a6d5a8f{/solr,file:///Users/janhoy/git/lucene-solr/solr/server/solr-webapp/webapp/,AVAILABLE}{/Users/janhoy/git/lucene-solr/solr/server/solr-webapp/webapp}
2019-12-19 13:33:44.825 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@2f84acf7(idp_hf1,h=[vt-for1-ping01.foretak1.test, vt-for1-ping01],w=[]) for Server@3204e238[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks]
2019-12-19 13:33:44.825 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@38ed139b(idp_regional,h=[vt-reg-ping01.regional.test],w=[]) for Server@3204e238[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks]
2019-12-19 13:33:44.825 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@a5272be(solr-ssl,h=[localhost, vt-docker01, vt-docker02],w=[]) for Server@3204e238[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks]
2019-12-19 13:33:44.825 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@58ba5b30(vtsearchln01t9,h=[vt-searchln01.dips.local, vt-searchln02.dips.local, vt-searchln03.dips.local, vt-searchln04.dips.local, vt-searchln05.dips.local, vt-searchln06.dips.local, vt-searchln07.dips.local, vt-searchln08.dips.local, vt-searchln09.dips.local, vt-searchln01t9.dips.local],w=[]) for Server@3204e238[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks]
2019-12-19 13:33:44.826 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@4dba773d(vt-sno-journ07,h=[vt-sno-journ07],w=[]) for Server@3204e238[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks]
2019-12-19 13:33:44.826 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@1d9bd4da(idp_hf2,h=[vt-for2-ping01.foretak2.test, vt-for2-ping01],w=[]) for Server@3204e238[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks]
2019-12-19 13:33:44.883 INFO (main) [ ] o.e.j.s.AbstractConnector Started ServerConnector@1133ec6e{SSL,[ssl, alpn, h2, http/1.1]}{0.0.0.0:8983}
2019-12-19 13:33:44.883 INFO (main) [ ] o.e.j.s.Server Started @2183ms
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment