Created
December 19, 2019 13:37
-
-
Save janhoy/085cafb645f11eaa2a91bd2114a71692 to your computer and use it in GitHub Desktop.
Solr SSL Kevin patch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| *** [WARN] *** Your open file limit is currently 256. | |
| It should be set to 65000 to avoid operational disruption. | |
| If you no longer wish to see this warning, set SOLR_ULIMIT_CHECKS to false in your profile or solr.in.sh | |
| *** [WARN] *** Your Max Processes Limit is currently 5568. | |
| It should be set to 65000 to avoid operational disruption. | |
| If you no longer wish to see this warning, set SOLR_ULIMIT_CHECKS to false in your profile or solr.in.sh | |
| OpenJDK 64-Bit Server VM warning: -XX:+UseLargePages not supported in this VM | |
| 2019-12-19 13:33:43.711 INFO (main) [ ] o.e.j.u.log Logging initialized @1009ms to org.eclipse.jetty.util.log.Slf4jLog | |
| 2019-12-19 13:33:43.898 INFO (main) [ ] o.e.j.s.Server jetty-9.4.24.v20191120; built: 2019-11-20T21:37:49.771Z; git: 363d5f2df3a8a28de40604320230664b9c793c16; jvm 11.0.5+10 | |
| 2019-12-19 13:33:43.913 INFO (main) [ ] o.e.j.d.p.ScanningAppProvider Deployment monitor [file:///Users/janhoy/git/lucene-solr/solr/server/contexts/] at interval 0 | |
| 2019-12-19 13:33:44.098 INFO (main) [ ] o.e.j.w.StandardDescriptorProcessor NO JSP Support for /solr, did not find org.apache.jasper.servlet.JspServlet | |
| 2019-12-19 13:33:44.104 INFO (main) [ ] o.e.j.s.session DefaultSessionIdManager workerName=node0 | |
| 2019-12-19 13:33:44.104 INFO (main) [ ] o.e.j.s.session No SessionScavenger set, using defaults | |
| 2019-12-19 13:33:44.106 INFO (main) [ ] o.e.j.s.session node0 Scavenging every 600000ms | |
| 2019-12-19 13:33:44.144 INFO (main) [ ] o.a.s.u.c.SSLConfigurations Setting javax.net.ssl.keyStorePassword | |
| 2019-12-19 13:33:44.145 INFO (main) [ ] o.a.s.u.c.SSLConfigurations Setting javax.net.ssl.trustStorePassword | |
| 2019-12-19 13:33:44.154 INFO (main) [ ] o.a.s.s.SolrDispatchFilter Using logger factory org.apache.logging.slf4j.Log4jLoggerFactory | |
| 2019-12-19 13:33:44.163 INFO (main) [ ] o.a.s.s.SolrDispatchFilter ___ _ Welcome to Apache Solr™ version 9.0.0-SNAPSHOT bb8e115c2f992322c668746e6546dfea77ce0f86 - janhoy - 2019-12-19 14:30:10 | |
| 2019-12-19 13:33:44.163 INFO (main) [ ] o.a.s.s.SolrDispatchFilter / __| ___| |_ _ Starting in standalone mode on port 8983 | |
| 2019-12-19 13:33:44.163 INFO (main) [ ] o.a.s.s.SolrDispatchFilter \__ \/ _ \ | '_| Install dir: /Users/janhoy/dips/solrssl/lucene-solr/solr | |
| 2019-12-19 13:33:44.163 INFO (main) [ ] o.a.s.s.SolrDispatchFilter |___/\___/_|_| Start time: 2019-12-19T13:33:44.163726Z | |
| 2019-12-19 13:33:44.194 INFO (main) [ ] o.a.s.c.SolrResourceLoader Using system property solr.solr.home: /Users/janhoy/dips/solrssl/lucene-solr/solr/server/solr | |
| 2019-12-19 13:33:44.199 INFO (main) [ ] o.a.s.c.SolrXmlConfig Loading container configuration from /Users/janhoy/dips/solrssl/lucene-solr/solr/server/solr/solr.xml | |
| 2019-12-19 13:33:44.270 INFO (main) [ ] o.a.s.c.SolrXmlConfig MBean server found: com.sun.jmx.mbeanserver.JmxMBeanServer@56928307, but no JMX reporters were configured - adding default JMX reporter. | |
| 2019-12-19 13:33:44.653 INFO (main) [ ] o.a.s.h.c.HttpShardHandlerFactory Host whitelist initialized: WhitelistHostChecker [whitelistHosts=null, whitelistHostCheckingEnabled=true] | |
| 2019-12-19 13:33:44.745 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@1907874b(idp_hf1,h=[vt-for1-ping01.foretak1.test, vt-for1-ping01],w=[]) for Client@767191b1[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks] | |
| 2019-12-19 13:33:44.745 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@34d52ecd(idp_regional,h=[vt-reg-ping01.regional.test],w=[]) for Client@767191b1[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks] | |
| 2019-12-19 13:33:44.745 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@5d21202d(solr-ssl,h=[localhost, vt-docker01, vt-docker02],w=[]) for Client@767191b1[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks] | |
| 2019-12-19 13:33:44.746 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@14b789f6(vtsearchln01t9,h=[vt-searchln01.dips.local, vt-searchln02.dips.local, vt-searchln03.dips.local, vt-searchln04.dips.local, vt-searchln05.dips.local, vt-searchln06.dips.local, vt-searchln07.dips.local, vt-searchln08.dips.local, vt-searchln09.dips.local, vt-searchln01t9.dips.local],w=[]) for Client@767191b1[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks] | |
| 2019-12-19 13:33:44.748 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@6eb17ec8(vt-sno-journ07,h=[vt-sno-journ07],w=[]) for Client@767191b1[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks] | |
| 2019-12-19 13:33:44.748 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@730f9695(idp_hf2,h=[vt-for2-ping01.foretak2.test, vt-for2-ping01],w=[]) for Client@767191b1[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks] | |
| 2019-12-19 13:33:44.769 ERROR (main) [ ] o.a.s.s.SolrDispatchFilter Could not start Solr. Check solr/home property and the logs | |
| 2019-12-19 13:33:44.791 ERROR (main) [ ] o.a.s.c.SolrCore null:org.apache.solr.common.SolrException: Error instantiating shardHandlerFactory class [HttpShardHandlerFactory]: java.lang.UnsupportedOperationException: X509ExtendedKeyManager only supported on Server | |
| at org.apache.solr.handler.component.ShardHandlerFactory.newInstance(ShardHandlerFactory.java:56) | |
| at org.apache.solr.core.CoreContainer.load(CoreContainer.java:632) | |
| at org.apache.solr.servlet.SolrDispatchFilter.createCoreContainer(SolrDispatchFilter.java:262) | |
| at org.apache.solr.servlet.SolrDispatchFilter.init(SolrDispatchFilter.java:182) | |
| at org.eclipse.jetty.servlet.FilterHolder.initialize(FilterHolder.java:134) | |
| at org.eclipse.jetty.servlet.ServletHandler.lambda$initialize$0(ServletHandler.java:751) | |
| at java.base/java.util.Spliterators$ArraySpliterator.forEachRemaining(Spliterators.java:948) | |
| at java.base/java.util.stream.Streams$ConcatSpliterator.forEachRemaining(Streams.java:734) | |
| at java.base/java.util.stream.Streams$ConcatSpliterator.forEachRemaining(Streams.java:734) | |
| at java.base/java.util.stream.ReferencePipeline$Head.forEach(ReferencePipeline.java:658) | |
| at org.eclipse.jetty.servlet.ServletHandler.initialize(ServletHandler.java:744) | |
| at org.eclipse.jetty.servlet.ServletContextHandler.startContext(ServletContextHandler.java:360) | |
| at org.eclipse.jetty.webapp.WebAppContext.startWebapp(WebAppContext.java:1445) | |
| at org.eclipse.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1409) | |
| at org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:822) | |
| at org.eclipse.jetty.servlet.ServletContextHandler.doStart(ServletContextHandler.java:275) | |
| at org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:524) | |
| at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72) | |
| at org.eclipse.jetty.deploy.bindings.StandardStarter.processBinding(StandardStarter.java:46) | |
| at org.eclipse.jetty.deploy.AppLifeCycle.runBindings(AppLifeCycle.java:188) | |
| at org.eclipse.jetty.deploy.DeploymentManager.requestAppGoal(DeploymentManager.java:513) | |
| at org.eclipse.jetty.deploy.DeploymentManager.addApp(DeploymentManager.java:154) | |
| at org.eclipse.jetty.deploy.providers.ScanningAppProvider.fileAdded(ScanningAppProvider.java:173) | |
| at org.eclipse.jetty.deploy.providers.WebAppProvider.fileAdded(WebAppProvider.java:447) | |
| at org.eclipse.jetty.deploy.providers.ScanningAppProvider$1.fileAdded(ScanningAppProvider.java:66) | |
| at org.eclipse.jetty.util.Scanner.reportAddition(Scanner.java:784) | |
| at org.eclipse.jetty.util.Scanner.reportDifferences(Scanner.java:753) | |
| at org.eclipse.jetty.util.Scanner.scan(Scanner.java:641) | |
| at org.eclipse.jetty.util.Scanner.doStart(Scanner.java:540) | |
| at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72) | |
| at org.eclipse.jetty.deploy.providers.ScanningAppProvider.doStart(ScanningAppProvider.java:146) | |
| at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72) | |
| at org.eclipse.jetty.deploy.DeploymentManager.startAppProvider(DeploymentManager.java:599) | |
| at org.eclipse.jetty.deploy.DeploymentManager.doStart(DeploymentManager.java:249) | |
| at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72) | |
| at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169) | |
| at org.eclipse.jetty.server.Server.start(Server.java:407) | |
| at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117) | |
| at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:100) | |
| at org.eclipse.jetty.server.Server.doStart(Server.java:371) | |
| at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72) | |
| at org.eclipse.jetty.xml.XmlConfiguration.lambda$main$0(XmlConfiguration.java:1888) | |
| at java.base/java.security.AccessController.doPrivileged(Native Method) | |
| at org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1837) | |
| at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) | |
| at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) | |
| at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) | |
| at java.base/java.lang.reflect.Method.invoke(Method.java:566) | |
| at org.eclipse.jetty.start.Main.invokeMain(Main.java:218) | |
| at org.eclipse.jetty.start.Main.start(Main.java:491) | |
| at org.eclipse.jetty.start.Main.main(Main.java:77) | |
| Caused by: java.lang.RuntimeException: java.lang.UnsupportedOperationException: X509ExtendedKeyManager only supported on Server | |
| at org.apache.solr.client.solrj.impl.Http2SolrClient.createHttpClient(Http2SolrClient.java:223) | |
| at org.apache.solr.client.solrj.impl.Http2SolrClient.<init>(Http2SolrClient.java:153) | |
| at org.apache.solr.client.solrj.impl.Http2SolrClient$Builder.build(Http2SolrClient.java:832) | |
| at org.apache.solr.handler.component.HttpShardHandlerFactory.init(HttpShardHandlerFactory.java:323) | |
| at org.apache.solr.handler.component.ShardHandlerFactory.newInstance(ShardHandlerFactory.java:51) | |
| ... 50 more | |
| Caused by: java.lang.UnsupportedOperationException: X509ExtendedKeyManager only supported on Server | |
| at org.eclipse.jetty.util.ssl.SslContextFactory.newSniX509ExtendedKeyManager(SslContextFactory.java:1273) | |
| at org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1255) | |
| at org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:374) | |
| at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:245) | |
| at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72) | |
| at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169) | |
| at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117) | |
| at org.eclipse.jetty.client.HttpClient.doStart(HttpClient.java:244) | |
| at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72) | |
| at org.apache.solr.client.solrj.impl.Http2SolrClient.createHttpClient(Http2SolrClient.java:221) | |
| ... 54 more | |
| 2019-12-19 13:33:44.810 INFO (main) [ ] o.e.j.s.h.ContextHandler Started o.e.j.w.WebAppContext@5a6d5a8f{/solr,file:///Users/janhoy/git/lucene-solr/solr/server/solr-webapp/webapp/,AVAILABLE}{/Users/janhoy/git/lucene-solr/solr/server/solr-webapp/webapp} | |
| 2019-12-19 13:33:44.825 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@2f84acf7(idp_hf1,h=[vt-for1-ping01.foretak1.test, vt-for1-ping01],w=[]) for Server@3204e238[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks] | |
| 2019-12-19 13:33:44.825 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@38ed139b(idp_regional,h=[vt-reg-ping01.regional.test],w=[]) for Server@3204e238[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks] | |
| 2019-12-19 13:33:44.825 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@a5272be(solr-ssl,h=[localhost, vt-docker01, vt-docker02],w=[]) for Server@3204e238[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks] | |
| 2019-12-19 13:33:44.825 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@58ba5b30(vtsearchln01t9,h=[vt-searchln01.dips.local, vt-searchln02.dips.local, vt-searchln03.dips.local, vt-searchln04.dips.local, vt-searchln05.dips.local, vt-searchln06.dips.local, vt-searchln07.dips.local, vt-searchln08.dips.local, vt-searchln09.dips.local, vt-searchln01t9.dips.local],w=[]) for Server@3204e238[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks] | |
| 2019-12-19 13:33:44.826 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@4dba773d(vt-sno-journ07,h=[vt-sno-journ07],w=[]) for Server@3204e238[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks] | |
| 2019-12-19 13:33:44.826 INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@1d9bd4da(idp_hf2,h=[vt-for2-ping01.foretak2.test, vt-for2-ping01],w=[]) for Server@3204e238[provider=null,keyStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks,trustStore=file:///Users/janhoy/Cominvent/Projects/DIPS/solrssl/cert/solr-ssl.keystore.jks] | |
| 2019-12-19 13:33:44.883 INFO (main) [ ] o.e.j.s.AbstractConnector Started ServerConnector@1133ec6e{SSL,[ssl, alpn, h2, http/1.1]}{0.0.0.0:8983} | |
| 2019-12-19 13:33:44.883 INFO (main) [ ] o.e.j.s.Server Started @2183ms |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment