Baba, In your first image, the application looks to be on a different server (192.168.1.5) from cas (192.168.1.4). If your application is accessed with https://192.168.1.5/..., you will need to add its certificate to the java keystore where you put the one you made with createKeystore (in $JAVA_HOME/lib/security/cacerts). You will also have to put the cas certificate to your application's certs (where nginx will look for it).
Getting self signed certs set up correctly can be tricky. That is why it is easier to start with an application that is on http instead of https. Ray On Fri, 2021-11-05 at 12:37 +0000, Baba Ndiaye wrote: Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information. Hi Ray when i build the cas.war i execute this command ./gradlew createKeystore the location folder /etc/cas/thekeystore but i never use it so i also have a good certif (not autosigned) and i use it for my nginx (tomcat redirection) and my moodle. Le jeu. 4 nov. 2021 à 16:06, Ray Bon <[email protected]<mailto:[email protected]>> a écrit : Baba, Did you create a self signed certificate for your application? If so, you would have to add it to the java keystore. You do not need to start with an https url for your application, just use http://... Once things are running, you can add a certificate. See https://apereo.github.io/cas/6.4.x/installation/Troubleshooting-Guide.html#ssl--certificates Ray On Thu, 2021-11-04 at 12:33 +0000, Baba Ndiaye wrote: Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information. root@srv-cas:~# tail -20 /var/log/nginx/tomcat-error.log 2021/11/04 02:12:23 [crit] 112503#112503: *77 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: x.x.x.x, server: 0.0.0.0:443<http://0.0.0.0:443> 2021/11/04 03:55:14 [crit] 112503#112503: *113 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: x.x.x.x, server: 0.0.0.0:443<http://0.0.0.0:443> Le jeu. 4 nov. 2021 à 11:47, Baba Ndiaye <[email protected]<mailto:[email protected]>> a écrit : i follow this tutorial but it's dont work yet Apereo CAS 6.4.x Deployment - WAR Overlays || Fawnoos || Open-Source Identity and Access Management Consulting Services<https://fawnoos.com/2021/08/29/cas64-gettingstarted-overlay/> Le mer. 3 nov. 2021 à 23:36, Baba Ndiaye <[email protected]<mailto:[email protected]>> a écrit : Thank Felix i changed it but i have the same error so i want to know if i must configure a another files like cas properties ???? Le mer. 3 nov. 2021 à 19:47, Felix Schumacher <[email protected]<mailto:[email protected]>> a écrit : Hi Baba, the regex is not correct. It should be ending with //.* and not //* Regards Felix Am 3. November 2021 18:58:12 MEZ schrieb Baba Ndiaye <[email protected]<mailto:[email protected]>>: Hi Ray i change the config and now i use https for all applications but i always have the same error but in the url is https now [cas-url-error.png] and in my app-id.json i have this { "@class" : "org.apereo.cas.services.RegexRegisteredService", "serviceId" : "^(https?)://*", "name" : "Moodle", "id" : 1635948950, "evaluationOrder" : 99999 } Le mer. 3 nov. 2021 à 16:46, Ray Bon <[email protected]<mailto:[email protected]>> a écrit : Baba, In the image, the service= parameter is an http url. Change your service definition to, ^(https?)://.* Ray On Wed, 2021-11-03 at 16:30 +0000, Baba Ndiaye wrote: Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information. Hi Ray I add support-json-service-registry and rebuid build.gradle I also uncomment cas.service-registry.json.location=/etc/cas/services I add the folder I also create a file moodle-id.json { "@class" : "org.apereo.cas.services.RegexRegisteredService", "serviceId" : "^(https)://*", "name" : "Moodle", "id" : id "evolutionOrder": 99999 } id=date+%s But it's not work Le mer. 3 nov. 2021 à 16:14, Ray Bon <[email protected]<mailto:[email protected]>> a écrit : Baba, That message means that the service sent to cas/login does not match one in the service registry. Check that your service regex will match including parameters in the service url. Ray On Wed, 2021-11-03 at 04:00 -0700, Baba Ndiaye wrote: Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information. Hi i finally success to configure CAS with LDAP authentication but when i try to use it with moodle i always have this message. [cas-error.JPG] -- Ray Bon Programmer Analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected]<mailto:[email protected]> I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional territory the university stands, and the Songhees, Esquimalt and WSÁNEĆ peoples whose historical relationships with the land continue to this day. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/097f1bc6fd5ff01bc01e7085ff7cd0815a50a3b5.camel%40uvic.ca<https://groups.google.com/a/apereo.org/d/msgid/cas-user/097f1bc6fd5ff01bc01e7085ff7cd0815a50a3b5.camel%40uvic.ca?utm_medium=email&utm_source=footer>. -- Ray Bon Programmer Analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected]<mailto:[email protected]> I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional territory the university stands, and the Songhees, Esquimalt and WSÁNEĆ peoples whose historical relationships with the land continue to this day. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/cddd375cb9cb9635841b6d116e005daea86bf59f.camel%40uvic.ca<https://groups.google.com/a/apereo.org/d/msgid/cas-user/cddd375cb9cb9635841b6d116e005daea86bf59f.camel%40uvic.ca?utm_medium=email&utm_source=footer>. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/8BEA2A48-3FD5-412A-BCFE-5754FB3F32D2%40internetallee.de<https://groups.google.com/a/apereo.org/d/msgid/cas-user/8BEA2A48-3FD5-412A-BCFE-5754FB3F32D2%40internetallee.de?utm_medium=email&utm_source=footer>. -- Ray Bon Programmer Analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected]<mailto:[email protected]> I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional territory the university stands, and the Songhees, Esquimalt and WSÁNEĆ peoples whose historical relationships with the land continue to this day. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/745a18707accf120c961ea1c688d68cbc7338e3e.camel%40uvic.ca<https://groups.google.com/a/apereo.org/d/msgid/cas-user/745a18707accf120c961ea1c688d68cbc7338e3e.camel%40uvic.ca?utm_medium=email&utm_source=footer>. -- Ray Bon Programmer Analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected]<mailto:[email protected]> I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional territory the university stands, and the Songhees, Esquimalt and WSÁNEĆ peoples whose historical relationships with the land continue to this day. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/5e3eea092311a61b3a6a03f1fd9c96e7c297a4bd.camel%40uvic.ca.
