Thanks.

So would something like this be a vlid properties file?

  #properties=SSL
  #keyStoreType
  keystorePath=/etc/shib-cas/truststore.jks
  keyStorePass=SecretDontTell
  #keyManagerType=SunX509
  #certificatePassword

I.e. the '#' lines are ignored, the 'keyStorePath' is just the path to a Java 
keystore, and the 'keyStorePass' is just the plaintext password?

Thanks,
Carl

----- Original Message -----
From: "Misagh Moayyed" <[email protected]>
To: [email protected]
Sent: Wednesday, August 5, 2015 10:01:04 AM
Subject: RE: [cas-user] Java CAS client and Trust Store

Yes. Look for "sslConfigFile" here in the project's README/docs:
https://github.com/Jasig/java-cas-client 

I don't know if that will stop the client from looking into the Java
keystore though. Probably not. 

> -----Original Message-----
> From: Waldbieser, Carl [mailto:[email protected]]
> Sent: Wednesday, August 5, 2015 6:43 AM
> To: [email protected]
> Subject: [cas-user] Java CAS client and Trust Store
> 
> 
> Is there some way to tell the Java CAS client what trust store it should
> be using?
> 
> I may be using the incorrect terminology, so put another way: Is there a
> way to tell the Java CAS client that I want it to trust the CA
> certificates in a particular keystore file (.jks file) rather than the
> global Java keystore?
> 
> Thanks,
> Carl Waldbieser
> ITS Systems Programmer
> Lafayette College
> 
> --
> You are currently subscribed to [email protected] as:
> [email protected] To unsubscribe, change settings or access archives,
> see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to