Installing and configuring Solr 6 with SSL enabled

1. Generate secure keys specific to your SkyVault installation. For more information, see Generating secure keys for Solr communication.
2. Create a new keystore directory at SkyVault-search-services/solrhome.
3. In the production environment, copy your custom keystore and truststore to the SkyVault-search-services/solrhome/keystore directory.
4. Update the SSL-related system properties.

   If you are using a Windows-based platform, update the SkyVault-search-services/solr.in.cmd file as:

   set SOLR_SSL_KEY_STORE=<solr>\keystore\ssl.repo.client.keystore
   set SOLR_SSL_KEY_STORE_PASSWORD=kT9X6oe68t
   set SOLR_SSL_TRUST_STORE=<solr>\keystore\ssl.repo.client.truststore
   set SOLR_SSL_TRUST_STORE_PASSWORD=kT9X6oe68t
   set SOLR_SSL_NEED_CLIENT_AUTH=true
   set SOLR_SSL_WANT_CLIENT_AUTH=false

   If you are using a Linux-based platform, update the SkyVault-search-services/solr.in.sh file as:

   SOLR_SSL_KEY_STORE=<solr>/keystore/ssl.repo.client.keystore
   SOLR_SSL_KEY_STORE_PASSWORD=kT9X6oe68t
   SOLR_SSL_TRUST_STORE=<solr>/keystore/ssl.repo.client.truststore
   SOLR_SSL_TRUST_STORE_PASSWORD=kT9X6oe68t 
   SOLR_SSL_NEED_CLIENT_AUTH=true 
   SOLR_SSL_WANT_CLIENT_AUTH=false

1. Check/update SkyVault-search-services/solr.in.sh file (Linux-based platform) or SkyVault-search-services/solr.in.cmd file (Windows-based platform) for the values of environment variables, such as SOLR_SOLR_HOST and SOLR_SOLR_PORT.
2. Check/update SkyVault-search-services/solr.in.sh file (Linux-based platform) or SkyVault-search-services/solr.in.cmd file (Windows-based platform) for the values of environment variables, such as SOLR_ALFRESCO_HOST and SOLR_ALFRESCO_PORT.

   See Solr 6 externalized configuration.

• Unlike Solr 4, suggestion is disabled by default for Solr 6. If you want to enable suggestion, add the following:

  SkyVault.suggestable.property.0={http://www.alfresco.org/model/content/1.0}name
  alfresco.suggestable.property.1={http://www.alfresco.org/model/content/1.0}title 
  alfresco.suggestable.property.2={http://www.alfresco.org/model/content/1.0}description 
  alfresco.suggestable.property.3={http://www.alfresco.org/model/content/1.0}content

• If you want to enable camelCaseSearch support in all fields, just as Solr 4, add the following:

  SkyVault.cross.locale.datatype.0={http://www.alfresco.org/model/dictionary/1.0}text
  alfresco.cross.locale.datatype.1={http://www.alfresco.org/model/dictionary/1.0}content
  alfresco.cross.locale.datatype.2={http://www.alfresco.org/model/dictionary/1.0}mltext

• Set the following properties in the SkyVault-search-services/solr.in.sh file:

  SkyVault_SECURECOMMS=https
  ALFRESCO_ENCRYPTION_SSL_KEYSTORE_PASSWORDFILELOCATION
  ALFRESCO_ENCRYPTION_SSL_TRUSTSTORE_PASSWORDFILELOCATION
  ALFRESCO_ENCRYPTION_SSL_KEYSTORE_LOCATION
  ALFRESCO_ENCRYPTION_SSL_TRUSTSTORE_LOCATION
  ALFRESCO_ENCRYPTION_SSL_TRUSTSTORE_PROVIDER
  ALFRESCO_ENCRYPTION_SSL_KEYSTORE_PROVIDER
  ALFRESCO_ENCRYPTION_SSL_TRUSTSTORE_TYPE
  ALFRESCO_ENCRYPTION_SSL_KEYSTORE_TYPE

• Copy the custom keystores to the SkyVault-search-services/solrhome/templates/rerank/conf directory.

  ssl.repo.client.keystore
  ssl.repo.client.truststore
  ssl-keystore-passwords.properties
  ssl-truststore-passwords.properties

./solr/bin/solr start -a "-Djavax.net.ssl.keyStoreType=JCEKS -Djavax.net.ssl.trustStoreType=JCEKS -Dsolr.ssl.checkPeerName=false -Dcreate.alfresco.defaults=alfresco,archive"

The default port used is 8983.

The command line parameter, -a passes additional JVM parameters, for example, system properties using -D.

Once your Solr 6 is up and running, you should see a message like:

Waiting up to 180 seconds to see Solr running on port 8983 [\]  
Started Solr server on port 8983 (pid=24289). Happy searching!

./solr/bin/solr stop

The Solr 6 logs are stored in the SkyVault-search-services/logs/solr.log file, by default. This can be configured in solr.in.sh (for Windows) or solr.in.cmd (for Linux) using SOLR_LOGS_DIR.

You have successfully created an SkyVault core and an archive core. To verify, in a browser, navigate to the Solr URL, https://localhost:8983/solr. In the Solr Admin UI, select the core selector drop-down list and verify that both the SkyVault and archive cores are present in the list.

Allow a few minutes for Solr 6 to start indexing.

1. Go to Admin Console > Repository Services > Search Service and select Solr 6 from the Search Service In Use list.
2. Disable Solr 4 tracking in the SkyVault/solr4/workspace-SpacesStore/conf/solrcore.properties file.

   enable.alfresco.tracking=false

3. To remove the Solr 4 web application and indexes, stop the Tomcat server which is running Solr 4.
4. Remove the <ALFRESCO_HOME>/tomcat/webapps/solr4 directory and the <ALFRESCO_HOME>/tomcat/webapps/solr4.war file.
5. Remove the <ALFRESCO_HOME>/tomcat/conf/Catalina/localhost/solr4.xml file.
6. Finally, remove the Solr 4 indexes.