The Tomcat instructions tell you how to install the cert on the Tomcat server, which is running CAS, and it your browser can access that server that is a good step 1. However, the error you mention occurs in the CAS filter when accessing CAS server to validate the service ticket. Your Java VM has to be configured to trust this certificate, and it does not look in the keystore you configured for Tomcat.

Look at this Wiki page: http://www.ja-sig.org/wiki/x/3ko

Pay special attention to the step starting with:

   keytool -import -trustcacerts...

Adam

nedim ozan tekin wrote:
Hello friends, i am so new to CAS that, i have integrated CAS server with Jboss Portal2.7.2.
I configured the SSL according to 
http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html.
However, CAS login page comes and i login successfully and then jboss portal 
login page comes due to the following error.

ERROR [CASReceipt] edu.yale.its.tp.cas.client.CASAuthenticationException: 
Unable to validate ProxyTicketValidator 
[[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null] 
[edu.yale.its.tp.cas.client.ServiceTicketValidator 
casValidateUrl=[https://portal1.mms.pmup.gov.tr:8888/cas/serviceValidate] 
ticket=[ST-1-a1VxKqgZscDNXcjv5Rb4-cas] 
service=[http%3A%2F%2Fportal1.mms.pmup.gov.tr%3A8080%2Fportal%2Fauth%2Fportal%2Fdefault%2Fdefault]
 renew=false]]]

i have a CA, take the certificate  and certificate chain from CA. and imported 
to my keystore according to above ssl-howto.html .

and my server.xml is that:
  <Connector port="8888" maxHttpHeaderSize="8192"
        maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
        enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true" SSLEnabled="true"
        clientAuth="false" sslProtocol="TLS"
        keystoreFile= "/cert/keystore"
        keystorePass="changeit"

     />

Is there anything that i didnt do ?? why do i take this error?
could you please help me?

Nedim Ozan Tekin
System Engineer
[email protected]
begin:vcard
fn:Adam Rybicki
n:Rybicki;Adam
org:Unicon, Inc.;Professional Services
adr:Suite 113;;3140 North Arizona Avenue;Chandler;AZ;85225;United States
email;internet:[email protected]
tel;work:+1-480-558-2400
tel;home:+1-310-265-8286
tel;cell:+1-310-980-2758
x-mozilla-html:FALSE
url:http://www.unicon.net/
version:2.1
end:vcard

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to