cas

Posted 2021-01-20 albert-think

一证书

keytool -genkey -alias tomcat -keyalg RSA -keystore E:/keys/keystore

keytool -export -trustcacerts -alias tomcat -file E:/keys/tomcat1.cer -keystore E:/keys/keystore

keytool -import -trustcacerts -alias tomcat -file E:/keys/tomcat1.cer -keystore "C:Program FilesJavajdk1.7.0_03jrelibsecuritycacerts"

生成证书注意  然后输入姓氏：（这里为 cas-server.com） cas 服务器访问域名

＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝

keytool -delete -alias tomcat -keystore C:Program FilesJavajdk1.7.0_03jrelibsecuritycacerts -storepass changeit

keytool -list -keystore "C:Program FilesJavajdk1.7.0_03jrelibsecurity/cacerts"

二 cas service tomcat (server.xml)

<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" keystoreFile="E:/keys/keystore" keystorePass="123456" />
<!-- An Engine represents the entry point (within Catalina) that processes