Keystores and certificates for Repository and Solr in 4.0.c

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

jonvargas

Hi,

I migrated a 4.0.b installation to 4.0.c one, and then I installed and configured Solr as a webapp, but neither me (by using browser) or Alfresco are unable to connect to Solr, and a 401 HTTP Error is returned.

Afaik, both Alfresco and the web browser should have an installed certificate so that a SSL connection could be done correctly. When using a clean 4.0.c bundle installation and adding "browser.p12" to Firefox, it works. But when I copied those keystores, passwords, keys and configuration from the pristine 4.0.c installation to 4.0.b one, Alfresco raises a 401 exception when the user tries to perform a search.

The same error (HTTP 301) happens when I try to access to by using browser directly.

Then, I tried to generate new key/pair certificates for both Solr and Repository as described here, but I need cacert.key and cacert.key, which are not available (or maybe I haven't found them).

Is it required to generate new key files for each new Alfresco installation?

How can I proceed, what follows?

In browser:

type Status report

message Cannot authenticate with the provided credentials

description This request requires HTTP authentication (Cannot authenticate with the provided credentials).‍‍‍‍‍‍

In catalina.out:

SEVERE: Job (Solr.CoreTracker-alfresco threw an exception.
org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: org.alfresco.error.AlfrescoRuntimeException: 00312115 GetModelsDiff return status is 401]
        at org.quartz.core.JobRunShell.run(JobRunShell.java:227)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:563)
Caused by: org.alfresco.error.AlfrescoRuntimeException: 00312115 GetModelsDiff return status is 401
        at org.alfresco.solr.client.SOLRAPIClient.getModelsDiff(SOLRAPIClient.java:1011)
        at org.alfresco.solr.tracker.CoreTracker.trackModels(CoreTracker.java:1453)
        at org.alfresco.solr.tracker.CoreTracker.trackRepository(CoreTracker.java:1126)
        at org.alfresco.solr.tracker.CoreTracker.updateIndex(CoreTracker.java:483)
        at org.alfresco.solr.tracker.CoreTrackerJob.execute(CoreTrackerJob.java:45)
        at org.quartz.core.JobRunShell.run(JobRunShell.java:216)
        … 1 more

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

jonvargas

I fixed partially the problem by:

* Regerating keys and passwords for Alfresco and Solr
* Adding "issued to" of certificates to tomcat-users.xml
* Granting "repo" and "repoclient" roles to this user
* Cleaning up archive and workspace directories under solr folder

Although the problem described here doesn't happen again, when using the search box the process always return 0 results, for both old and new documents. Any idea about what else has to be done to support Solr on 4.0.c upgrade from 4.0.b?