It seems the problem was that I host more https server on the same
ip/port. It should work if the client does support SNI.
I have checked the ssl connection openssl s_client -connect
cas.server.com:443 and the resulting certificate was an another host's
certificate. I have moved my cas from 443 to 8443 and stepped forward,
it working just like the egroupware, goes into an infinite loop,
requesting new tickets until the browser stops.
Cookie hunting starts...
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user