I have a keystore in /opt/tomcat/keystore that tomcat uses for SSL. I have another keystore in /etc/cas/thekeystore that cas uses. There is also another keystore in /usr/java/jre/lib/security/cacerts that I've imported certs into too. They are all using the same certs as I created a cert in one and imported it to the others.
On Tuesday, February 20, 2018 at 2:34:30 PM UTC-6, Kevin Liu wrote: > > Ray, > > I am trying to access /cas/status/dashboard from the tomcat server that's > deploying the cas.war. > > Kevin > On Tuesday, February 20, 2018 at 2:21:12 PM UTC-6, rbon wrote: >> >> Kevin, >> >> Are you accessing /cas/login or do you have a another application that is >> configured to use CAS? >> If a different application, is it running in the same tomcat as CAS or >> perhaps even on a different computer? >> >> Perhaps tomcat needs to have the certificate path in the https section of >> conf/server.xml. >> >> Ray >> >> On Tue, 2018-02-20 at 11:43 -0800, Kevin Liu wrote: >> >> I did do that but I'm still getting the same error it seems. Is there >> anything I'd have to restart for the change to take effect? >> >> On Tuesday, February 20, 2018 at 11:39:47 AM UTC-6, rbon wrote: >> >> Kevin, >> >> If you are using a self signed cert, it must be added into the java >> environment. Something like: >> >> install self signed certificates in java certificate store (must be done >> for every java upgrade) >> sudo keytool -import -file /etc/ssl/certs/name_of.crt -alias name_of >> -keystore $JAVA_HOME/jre/lib/security/cacerts >> >> Ray >> >> On Tue, 2018-02-20 at 07:59 -0800, Kevin Liu wrote: >> >> I'm running into a PKIX path building failed and in the documentation it >> lists this: "The problem here is that the CAS *client* does not trust >> the certificate presented by the CAS server; most often this occurs because >> of using a *self-signed certificate* on the CAS server. " >> >> I'm currently using tomcat to run cas vanila server. What would be the >> CAS client in this scenario? >> >> -- >> Ray Bon >> Programmer analyst >> Development Services, University Systems >> 2507218831 | CLE 019 | [email protected] >> >> >> -- >> Ray Bon >> Programmer analyst >> Development Services, University Systems >> 2507218831 | CLE 019 | [email protected] >> >> -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/39c46872-5637-4968-b6e4-6f45e254129d%40apereo.org.
