> What causes a certificate to be sent in request to the CAS?

Most common cause is incorrect configuration of the tomcat truststore.
 You specify trust in terms of a certificate authority issuer whose
certs you want to allow.  Hopefully that rings a bell and you can
specify it like the following:

      truststoreFile="/apps/mw/certs/allowed-clients.p12"
      truststorePass="changeit"
      truststoreType="PKCS12"

FYI I use PKCS12 keystores since they're easy to manage w/openssl
toolchain, but you can use what you like.  JKS is the default.

M

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to