When you have an Alfresco Content Services installation that requires an SSL configuration, you might encounter connection issues.
If Solr search and/or the Solr tracking is not working properly, you might see this message on the Tomcat console:
Aug 22, 2011 8:19:21 PM org.apache.tomcat.util.net.jsse.JSSESupport handShake WARNING: SSL server initiated renegotiation is disabled, closing connection
This message indicates that one side of the SSL connections is trying to renegotiate the SSL connection. This form of negotiation was found to be susceptible to man-in-the-middle attacks and it was disabled in the Java JSEE stack until a fix could be applied.
If your version of Java does not have the fix, you need to re-enable renegotiation by performing the following steps:
- Add the -Dsun.security.ssl.allowUnsafeRenegotiation=true option to JAVA_OPTS.
- Add the allowUnsafeLegacyRenegotiation="true" option to the Tomcat SSL connector.