Hm. I changed my CLIENT web.xml validation filter to use CAS20, which
I'm pretty sure is a step in the right direction. 
    <filter>
        <filter-name>CAS Validation Filter</filter-name>
 
<filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketV
alidationFilter</filter-class>
        <init-param>
            <param-name>casServerUrlPrefix</param-name>
 
<param-value>https://<MY_TOMCAT_SERVER>/authentication</param-value>
        </init-param>
        <init-param>
            <param-name>serverName</param-name>
            <param-value>https:// <MY_TOMCAT_SERVER></param-value>
        </init-param>
    </filter>

I'm now seeing 

exception

java.lang.RuntimeException: javax.net.ssl.SSLException: Unrecognized SSL
message, plaintext connection?
        
org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.
java:341)
        
org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.
java:305)
        
org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidat
or.retrieveResponseFromServer(AbstractCasProtocolUrlBasedTicketValidator
.java:50)
        
org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate
(AbstractUrlBasedTicketValidator.java:207)
        
org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(
AbstractTicketValidationFilter.java:169)
        
org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(Authen
ticationFilter.java:116)

root cause

javax.net.ssl.SSLException: Unrecognized SSL message, plaintext
connection?
        
com.sun.net.ssl.internal.ssl.InputRecord.handleUnknownRecord(InputRecord
.java:523)
        
com.sun.net.ssl.internal.ssl.InputRecord.read(InputRecord.java:355)
        
com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java
:830)
        
com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSo
cketImpl.java:1170)
        
com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.
java:1197)
        
com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.
java:1181)
        
sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434
)
        
sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Ab
stractDelegateHttpsURLConnection.java:166)
        
sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnec
tion.java:1172)
        
sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsUR
LConnectionImpl.java:234)
        
org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.
java:326)
        
org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.
java:305)
        
org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidat
or.retrieveResponseFromServer(AbstractCasProtocolUrlBasedTicketValidator
.java:50)
        
org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate
(AbstractUrlBasedTicketValidator.java:207)
        
org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(
AbstractTicketValidationFilter.java:169)
        
org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(Authen
ticationFilter.java:116)

If I try to hit
https://<MY_TOMCAT_SERVER>/authentication/serviceValidate directly, I
get the following:

The connection was interrupted
        
          The connection to inspiron-d06d.enthia.com was interrupted
while the page was loading.

  The site could be temporarily unavailable or too busy. Try again in a
few
    moments.
  If you are unable to load any pages, check your computer's network
    connection.
  If your computer or network is protected by a firewall or proxy, make
sure
    that Firefox is permitted to access the Web.

Any thoughts?

Thanks,
Eric Stein

-----Original Message-----
From: Stein, Eric 
Sent: Thursday, December 20, 2012 12:22 PM
To: [email protected]
Subject: Configuration snafu

I'm getting an error while validating a ticket from my client. The
response (in hello-world-webapp.log) looks like it's an HTML page, which
is almost certainly wrong. Does anybody know what I missed?

Thanks,
Eric Stein

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to