You might check out the server configuration section of the CAS deployment guide that David Curry has put together https://dacurry-tns.github.io/deploying-apereo-cas/building_server_configure-server-properties.html. My guess is that there is a slight mistake in what you are currently doing and perhaps if you go through David’s step-by-step it will show you what is off in your current approach.
From: [email protected] [mailto:[email protected]] On Behalf Of Curtis Ruck Sent: Thursday, September 13, 2018 4:01 PM To: CAS Community <[email protected]> Subject: [cas-user] Re: encryption and signing key generation The problem is due to the chicken and egg issue. I need to prepopulate the cas.properties, so the service can start up and work (without human intervention). I'm trying my best to avoid having to start a service, parse the logs, and modify config, then restart the service. The documentation seems very light on these keys. On Thursday, September 13, 2018 at 10:03:02 AM UTC-4, William E. wrote: +1 I ended up grabbing values from the cas startup logs and setting in my cas.properties. Seems to work. On Wednesday, September 12, 2018 at 3:34:32 PM UTC-5, Curtis Ruck wrote: So i'm trying to automate the generation and persistence of the cas.tgc.crypto and cas.webflow.crypto encryption and signing keys. I'm using the jwk-gen.jar, and when i store the key in cas.properties, i end up with "Invalid AES key length: 43 bytes" when trying to access the login page. If I let CAS generate a key, its the same exact string length (43 bytes). What is different between my key versus cas's generated keys? Then i'm extracting the k value from the json, and inserting it into my cas.properties. java -jar jwk-gen.jar -t oct 256 -o tgc-enc.jwks java -jar jwk-gen.jar -t oct 512 -o tgc-sig.jwks java -jar jwk-gen.jar -t oct 256 -o webflow-enc.jwks java -jar jwk-gen.jar -t oct 512 -o webflow-sig.jwks -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected] <mailto:[email protected]> . To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/16619ee4-f77f-4436-9237-5a0e812bd17f%40apereo.org <https://groups.google.com/a/apereo.org/d/msgid/cas-user/16619ee4-f77f-4436-9237-5a0e812bd17f%40apereo.org?utm_medium=email&utm_source=footer> . -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/032e01d44b9d%249d9eb680%24d8dc2380%24%40gmail.com.
