服务器端:tomcat 6.0 、jdk1.6、CAS-server-3.3.3
客户端:tomcat5.0 、jdk1.5、CAS-client-2.1.1
证书制作步骤:
客户端生成密钥:
keytool -genkey -alias server -validity 3650 -keystore server.jks -keyalg RSA
设置:CN=localhost 密码设置:changeit
客户端生成证书:
keytool -export -alias server -file server.crt -keystore server.jks
服务器端导入证书:
keytool -import -alias server -file server.crt -keystore client.jks
服务器端导入证书:
keytool -import -trustcacerts -alias tomcat -file server.crt -keystore D:/Program Files/Java/jdk1.5.0_04/jre/lib/security/cacerts -storepass changeit
服务器端导入证书:
keytool -import -trustcacerts -alias tomcat -file server.crt -keystore D:/Program Files/Java/jre1.5.0_04/lib/security/cacerts -storepass changeit
服务器端tomcat server.xml配置:
<Connector protocol="org.apache.coyote.http11.Http11Protocol"
port="8443" minSpareThreads="5" maxSpareThreads="75"
enableLookups="true" disableUploadTimeout="true"
&