Hello, I can log into CAS if I point my browser to CAS via tomcat https, yes.
I believe the issue is mod_auth_cas cacert.pem fials between apache and cas. I do not know how to make that cert. Thank You, Chris Cheltenham SwainTechs / HHS Cell# 267-586-2369 -----Original Message----- From: Pitonyak, Andrew D [mailto:[email protected]] Sent: Friday, November 21, 2014 10:50 AM To: [email protected] Subject: RE:[cas-user] CAs nnot working for us Are you able to login directly to the CAS server using HTTPS? My first attempt to set the certificate was because I did not use the same password for my store as that used by Tomcat. Finally, I had to export the cert so that I could import that Cert into Windows (or Windows prevented it). Kind of along shot.... ________________________________ From: Chris Cheltenham [[email protected]] Sent: Friday, November 21, 2014 8:34 AM To: [email protected] Subject: [cas-user] CAs nnot working for us Hello All Thanks for any help in advance, We have CAS set up tomcat picks up and logs into CAS via ldap fine. When we try to process from the web server using mod_auth_cas ,we get this error; >From /var/log/https/ssl_error How do you create the cacerts it cannot process? I copied this from the CAS / tomcat servers cert. [Fri Nov 21 08:31:33 2014] [error] [client 24.127.129.237] MOD_AUTH_CAS: Could not process Certificate Authority: /etc/pki/CA/cacert.pem, referer: https://10.153.111.217:8443/cas/login?service=https%3a%2f%2ftest.dcis.hhs.gov%2fnew-web [cid:[email protected]] Thank You, Chris Cheltenham SwainTechs / HHS Cell# 267-586-2369 -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
