cas单点登录+ssl双向认证失败了在线求解！！！！

问答首页 → Java企业应用

0 0

cas单点登录+ssl双向认证失败了在线求解！！！！10

版本信息：

cas-server-3.4.2

cas-client-3.1.10

jdk1.6

tomcat 6.0.29

描述：

在一台电脑上同时部署服务端和客户端。

登录单点系统正常，登录成功后跳转到客户端应用时报错。

证书我是用jdk自带keytool工具生成的自签名证书。sinosoft.jks 、lfwer.p12

错误信息：

exception 

java.lang.RuntimeException: java.net.SocketException: Software caused connection abort: recv failed
	org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:295)
	org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer(AbstractCasProtocolUrlBasedTicketValidator.java:33)
	org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:178)
	org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:132)
	org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(AuthenticationFilter.java:102)
	org.jasig.cas.client.session.SingleSignOutFilter.doFilter(SingleSignOutFilter.java:110)


root cause 

java.net.SocketException: Software caused connection abort: recv failed
	java.net.SocketInputStream.socketRead0(Native Method)
	java.net.SocketInputStream.read(SocketInputStream.java:129)
	com.sun.net.ssl.internal.ssl.InputRecord.readFully(InputRecord.java:293)
	com.sun.net.ssl.internal.ssl.InputRecord.read(InputRecord.java:331)
	com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:789)
	com.sun.net.ssl.internal.ssl.SSLSocketImpl.waitForClose(SSLSocketImpl.java:1467)
	com.sun.net.ssl.internal.ssl.HandshakeOutStream.flush(HandshakeOutStream.java:103)
	com.sun.net.ssl.internal.ssl.Handshaker.sendChangeCipherSpec(Handshaker.java:625)
	com.sun.net.ssl.internal.ssl.ClientHandshaker.sendChangeCipherAndFinish(ClientHandshaker.java:907)
	com.sun.net.ssl.internal.ssl.ClientHandshaker.serverHelloDone(ClientHandshaker.java:833)
	com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:230)
	com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:529)
	com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:465)
	com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:884)
	com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1120)
	com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1147)
	com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1131)
	sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434)
	sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:166)
	sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1049)
	sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234)
	org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:281)
	org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer(AbstractCasProtocolUrlBasedTicketValidator.java:33)
	org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:178)
	org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:132)
	org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(AuthenticationFilter.java:102)
	org.jasig.cas.client.session.SingleSignOutFilter.doFilter(SingleSignOutFilter.java:110)

tomcat配置：

    <Connector port="8443"  protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="200" scheme="https" secure="true" minSpareThreads="5" maxSpareThreads="75"
			   enableLookups="true" disableUploadTimeout="true"  acceptCount="100"
			   clientAuth="true" sslProtocol="TLS" keystoreFile="E:/ca/sinosoft.jks" keystorePass="sinosoft" truststoreFile="E:/ca/sinosoft.jks" 
			   truststorePass="sinosoft"  />

客户端web.xml配置：

<filter>
<filter-name>CAS Single Sign Out Filter</filter-name>
<filter-class>
org.jasig.cas.client.session.SingleSignOutFilter
</filter-class>

</filter>
<filter-mapping>
<filter-name>CAS Single Sign Out Filter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>

<filter>
<filter-name>CAS Authentication Filter</filter-name>
<filter-class>
org.jasig.cas.client.authentication.AuthenticationFilter
</filter-class>
<init-param>
<param-name>casServerLoginUrl</param-name>

<param-value>https://sinosoft:8443/cas/login</param-value>
</init-param>
<init-param>
<param-name>service</param-name>

<param-value>
http://192.168.101.119:8081/tomcat/index.jsp
</param-value>
</init-param>
</filter>
<filter>
<filter-name>CAS Validation Filter</filter-name>
<filter-class>
org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter
</filter-class>

<init-param>
<param-name>casServerUrlPrefix</param-name>
<param-value>https://sinosoft:8443/cas</param-value>
</init-param>
<init-param>
<param-name>serverName</param-name>
<param-value>http://192.168.101.119:8081</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>CAS Authentication Filter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>CAS Validation Filter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>

2012年4月26日 11:48

lfwer
20
0 0 2

3个答案按时间排序按投票排序

0 0

AuthenticationFilter 支持单向验证
Saml11AuthenticationFilter 支持双向验证
<filter>
<filter-name>CAS Authentication Filter</filter-name>
<filter-class>org.jasig.cas.client.authentication.Saml11AuthenticationFilter</filter-class>

2016年3月23日 21:03