Comments (7)
should work now, tests welcome ;)
from ansible.
Salut,
Avec cette nouvelle configuration, je suppose qu'il faut également retirer ou bien adapter ces lignes :
ansible/roles/tomcat/templates/server-proxycas.xml.j2
Lines 81 to 82 in 3519326
from ansible.
et bien ... je ne sais plus :/ ou alors pointer vers le keystore par defaut ?
from ansible.
une instance de test qui marchait hier n'arrive plus a valider de tickets CAS ajd, et si dans le server.xml
de proxycas
je pointe keystoreFile
vers /usr/lib/jvm/adoptopenjdk-8-hotspot-amd64/jre/lib/security/cacerts
(le keystore par défaut, dans lequel notre certificat autosigné à été importé) c'est pareil.
java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:443)
org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer(AbstractCasProtocolUrlBasedTicketValidator.java:41)
org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:193)
from ansible.
j'ai pu retrouver un CAS fonctionnel en commentant toute la section liée au connector écoutant sur le port 8443, mais je ne sais plus dans quels cas ce dernier était nécessaire..;
from ansible.
et ce meme CAS qui fonctionnait (avec le connector sur le port 8443 commenté) n'arrive soudainement plus a valider de tickets via SSL, sans raison apparente. Décidément, java et ssl..
from ansible.
hm, donc avec update-ca-certificates
on dirait que le cert autosigné se retrouve dans /etc/ssl/certs/java/cacerts
et pas/plus dans /usr/lib/jvm/adoptopenjdk-8-hotspot-amd64/jre/lib/security/cacerts
.. le playbook ansible s'assure pourtant que ce dernier est un lien vers le premier, donc une maj d'un autre composant a du casser ce lien. Ca remarche une fois replayé le tag keystore
..
from ansible.
Related Issues (20)
- geOrchestra version HOT 1
- Add Mviewer and Mviewer as optional installable viewer HOT 1
- gwc - use the config dir java env variable
- geonetwork - get rid of the geonetwork postgresql user
- MviewerStudio should only be accessible HOT 1
- Remove buster from ansible
- Update datahub configuration HOT 4
- tomcat proxycas - remove 8443 SSL port HOT 2
- migration bookworm/debian 12
- ALLOW_WORLD_READABLE_TMPFILES deprecated
- faq - remote ssh install errors : need sudo password
- Geoserver 404 and datafeeder unavailable HOT 6
- Could not fetch Mapstore2 artifacts from github HOT 3
- Mapstore2 Could not instantiate appender named "fileAppender".
- Mapstore2 - no target-mapping entry HOT 1
- ldap setup can fail if the target hostname is "...georchestra.org" HOT 1
- debian bullseye support HOT 3
- [ Mapstore ] Datadir HOT 2
- parts of the tomcat config files from /etc/default ignored ? HOT 1
- mapstore - switch to the package generated onto packages.g.o HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ansible.