> I keep getting an "unable to find valid certification path to requested
> target" error when connecting to /proxyCallback which is a filter map
> that points to Cas20ProxyReceivingTicketValidationFilter.

This is happening because the CAS server is attempting to connect to
that URL and do PKI validation in order to issue a proxy ticket to
your application.  The exact cause of failure appears to be that the
certificate is not trusted by the CAS server.

> Both certs are the same wild card
> cert and have been added to the keyring.

The certificate of your service needs to be added to the truststore
used by the CAS server, which is $JAVA_HOME/jre/lib/security/cacerts
by default.  I have never worked with wildcard certs, but that may
require additional configuration to get working properly.

You might consider whether you really need CAS proxy ticket support
for your application; if you don't, you could avoid the additional SSL
configuration altogether.

M

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to