-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Marvin,

Thanks for your help, but I am still running into trouble. I have tried
importing the Digicert Global CA from the website, as well as the CA
file provided to us in the bundle we got when we registered for a SSL. I
imported these both into .keystore in my users home dir, as there is no
reference to a keystore in the tomcat configuration file, and I still
see the same error.

Any more advice would be appreciated.

Jeff

Marvin Addison wrote:
>> ...
>> org.jasig.cas.util.HttpClient$MessageSender.call(HttpClient.java:195)
>>        at
>> org.jasig.cas.util.HttpClient$MessageSender.call(HttpClient.java:160)
>>        at
>> java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303)
>>        at java.util.concurrent.FutureTask.run(FutureTask.java:138)
>>        at
>> java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
>> ...
> 
> From the stack trace it looks like this is occurring on single
> sign-out where CAS sends the LogoutMessage to clients.  In that case
> it is the CAS _server_ that doesn't trust your DigiCert certificate on
> the client.  Import the DigiCert CA cert into your CAS server
> truststore and this should go away.
> 
> M
> 


- --
Jeff Chapin,
Assistant Systems/Applications Administrator
ITS-IS, University of Northern Iowa
Phone: 319-273-3162 Email: [email protected]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAku6QOkACgkQQiaEUfQoY7QCCgCfZqfwKB8uKuArOeyMb0DR+ZLz
CikAn3vIzQ6evSBI/jhQrjImWH+tjxnk
=tGUp
-----END PGP SIGNATURE-----

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to