> What causes a certificate to be sent in request to the CAS?
Most common cause is incorrect configuration of the tomcat truststore.
You specify trust in terms of a certificate authority issuer whose
certs you want to allow. Hopefully that rings a bell and you can
specify it like the following:
truststoreFile="/apps/mw/certs/allowed-clients.p12"
truststorePass="changeit"
truststoreType="PKCS12"
FYI I use PKCS12 keystores since they're easy to manage w/openssl
toolchain, but you can use what you like. JKS is the default.
M
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user