I don't know how you have anything set up.  All I can tell you is that the
hostname that your application is accessed under MUST match the CN of the
certificate that is being returned when that application is requested.

-SCott

-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia

On Mon, Jul 14, 2008 at 1:24 PM, SMallik <[EMAIL PROTECTED]> wrote:

>
> Hi,
> When I generate certificate in the name of "testcasa" ( machine where 2nd
> application is running ) and use it on testcasa, I get the following error
> :
>
> Your CAS credentials were rejected.
> Reason: sun.security.validator.ValidatorException: PKIX path building
> failed: sun.security.provider.certpath.SunCertPathBuilderException: unable
> to find valid certification path to requested target
>
> and then I cant access secured pages.
>
> But if I use testcas ( machine where 1st application and CAS are running )
> generated certificate on testcasa though I can access secured pages but on
> click of logout I get the following error :
>
> 2008-07-14 11:31:14,189 ERROR [org.jasig.cas.util.HttpClient] -
> java.io.IOException: HTTPS hostname wrong:  should be <testcasa>
> java.io.IOException: HTTPS hostname wrong:  should be <testcasa> .
>
> Is it mandatory that all CASified applications running on different
> machines
> use the same certificate as the the machine on which CAS server is running
> ?
> If I do the same , I get the error and If I use machine specific
> certificate
> then also I am getting error.
>
> Can you please suggest me, where I am going wrong ? I need to implement
> SSOut anyhow.
>
> Thanks
>
>
>
>
>
> --
> View this message in context:
> http://www.nabble.com/Logout-problem-tp18407195p18448728.html
> Sent from the CAS Users mailing list archive at Nabble.com.
>
> _______________________________________________
> Yale CAS mailing list
> [email protected]
> http://tp.its.yale.edu/mailman/listinfo/cas
>
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to