Mark McCoy <[EMAIL PROTECTED]> writes:
> I'll try it with DSA keys on Monday to see if that will work. I'll post the
> results (good or bad) here.
>
OK, so I didn't get around to it for a while, but I tried to create the DSA
instead of RSA keys, and I got the same error.
Here are my steps:
# openssl dsaparam -rand /dev/urandom 2048 > private.dsa
# openssl gendsa -rand /dev/urandom -out private.pem < private.dsa
# openssl dsa -pubout -in private.pem -out public.pem
# openssl dsa -inform PEM -outform DER -in private.pem -out private.key
# openssl dsa -inform PEM -outform DER -in private.pem -pubout -out public.key
# sudo cp *.key /opt/coolstack/tomcat/webapps/cas/WEB-INF/classes/
# sudo /etc/init.d/tomcat restart
The last few lines of the cas-servlet.xml file are:
<constructor-arg index="0" ref="servicesManager" />
</bean>
<bean
id="privateKeyFactoryBean"
class="org.jasig.cas.util.PrivateKeyFactoryBean"
p:location="classpath:private.key"
p:algorithm="DSA" />
<bean
id="publicKeyFactoryBean"
class="org.jasig.cas.util.DSAPublicKeyFactoryBean"
p:location="classpath:public.key"
p:algorithm="DSA" />
</beans>
and the error is still:
Error creating bean with name 'googleAccountsArgumentExtractor' defined in
ServletContext resource [/WEB-INF/cas-servlet.xml]: Cannot resolve reference
to bean 'privateKeyFactoryBean' while setting bean property 'privateKey';
nested exception is org.springframework.beans.factory.BeanCreationException:
Error creating bean with name 'privateKeyFactoryBean' defined in ServletContext
resource [/WEB-INF/cas-servlet.xml]: Invocation of init method failed;
nested exception is java.security.spec.InvalidKeySpecException:
Could not create DSA private key
Any ideas?
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas
