You can actually demo validation over http if you must and that should remove 
the cert error.  Just don't do it in prod ;-)




Sent from my Verizon Wireless BlackBerry

-----Original Message-----
From: Bryan Wooten <[email protected]>

Date: Fri, 31 Jul 2009 14:36:20 
To: <[email protected]>
Subject: RE: [cas-user] How do I get prinicpal from CASifyed client program?


I think my boss has a demo Monday (or early next week) and just wanted to have 
something working.  He asked me not to spend any time working on cert stuff 
[1].  So now I am just trying to get all the login pages branded with our 
headers and footers.

[1] I don't even have enough rights on the red box to do it... sigh.

-----Original Message-----
From: Marvin Addison [mailto:[email protected]] 
Sent: Friday, July 31, 2009 2:03 PM
To: [email protected]
Subject: Re: [cas-user] How do I get prinicpal from CASifyed client program?

> Since we are running our CAS server on a "red box" (i.e. test machine) my 
> boss has no desire to get a valid cert for it.

Just want to reiterate that you can make_any_ certificate appear
valid to Java as long as the issuer is trusted.  That means the issuer
certificate must be in the system truststore,
$JAVA_HOME/jre/lib/security/cacerts by default.  (And it is only a
default; you can use any key/truststore you want using system
properties to specify the path.)  If it's a self-signed cert, you just
import the cert itself (subject == issuer for self-signed cert) into
the truststore you're using.

Don't let SSL trust issues stop you from testing.

M

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user


-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to