GWT CAS Tomcat 배포 실패

Question

CAS로 내 GWT 프로젝트를 업그레이드했습니다. dev 모드에서 테스트 할 때 정상적으로 작동합니다. 이제는 Tomcat에 프로젝트를 배포하고 싶습니다. 내가 그것을 실행하면 CAS 서버에 연결할 수 있습니다. 하지만 CAS 서버가 다시 내 webapp로 안내하면이 오류가 발생합니다.

HTTP 상태 500 - javax.net.ssl.SSLHandshakeException : sun.security.validator.ValidatorException : PKIX 경로를 건물 실패 : sun.security.provider.certpath.SunCertPathBuilderException : 없습니다를 에 유효한 인증을 찾을 수 sun.security.validator.ValidatorException : PKIX p를 요청 대상

유형의 예외 보고서

메시지 javax.net.ssl.SSLHandshakeException 경로 ATH 건물 실패 : sun.security.provider.certpath.SunCertPathBuilderException가 : 에없는 서버가이 요청을 이행에서 그것을 를 방지 내부 오류가 발생

설명을 요청 대상에 유효한 인증 경로를 찾을 수 있습니다.

예외

java.lang.RuntimeException가 : javax.net.ssl.SSLHandshakeException : sun.security.validator.ValidatorException : PKIX 경로를 건물 실패 : sun.security.provider.certpath.SunCertPathBuilderException : 수 없습니다에 요청한 목표 org.jasig.cas.client.util.CommonUtils.getResponseFromServer (CommonUtils.java:295) org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer (AbstractCasProtocolUrlBasedTicketValidator.java:33)에 유효한 인증 경로를 찾을 org.jasig.cas.client.validation.AbstractUrlBasedTicketValida (AbstractTicketValidationFilter.java:132) org.jasig.cas.client.authentication.AuthenticationFilter.doFilter (AuthenticationFilter.java : 102) org.jasig.cas.client.util.HttpServletRequestWrapperFilter.doFilter (HttpServletRequestWrapperFilter.java:62) org.jasig.cas.client.session.SingleSignOutFilter.doFilter (SingleSignOutFilter.java:110)

원인

javax.net.ssl.SSLHandshakeException : sun.security.validator.ValidatorException : PKIX 경로 구축에 실패했습니다 : sun.security.provider.certpath.SunCertPathBuilderException는 : 에없는 것은 SSLSocketImpl (요청 대상 sun.security.ssl.Alerts.getSSLException (Alerts.java:192) sun.security.ssl.SSLSocketImpl.fatal에 유효한 인증 경로를 찾을 수 .java : 1902) sun.security.ssl.Handshaker.fatalSE (Handshaker.java:276) sun.security.ssl.Handshaker.fatalSE (Handshaker.java:270) sun.security.ssl.ClientHandshaker.serverCertificate ClientHandshaker.java : 1338) sun.security.ssl.ClientHandshaker.processMessage (ClientHandshaker.java:154) sun.security.ssl.Handshaker.processLoop (Handshaker.java:868) sun.security.ssl.Handshaker.process_record (Handshaker.java:804) sun.security.ssl.S SLSocketImpl.readRecord (SSLSocketImpl.java:1032) sun.security.ssl.SSLSocketImpl.performInitialHandshake (SSLSocketImpl.java : 1328) sun.security.ssl.SSLSocketImpl.startHandshake (SSLSocketImpl.java:1355) sun.security.ssl.SSLSocketImpl.startHandshake (SSLSocketImpl.java:1339) sun.net.www.protocol.https.HttpsClient .afterConnect (HttpsClient.java:515) sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect (AbstractDelegateHttpsURLConnection.java:185) sun.net.www.protocol.http.HttpURLConnection.getInputStream (HttpURLConnection.java:1299)) sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream (HttpsURLConnectionImpl.java:254) org.jasig.cas.client.util.CommonUtils.getResponseFromServer (CommonUtils.java:281) org.jasig.cas. client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer (AbstractCasProtocolUrlBa sedTicketValidator.java:33) org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate (AbstractUrlBasedTicketValidator.java:178) org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter (AbstractTicketValidationFilter.java:132) 조직 .jasig.cas.client.authentication.AuthenticationFilter.doFilter (AuthenticationFilter.java:102) org.jasig.cas.client.util.HttpServletRequestWrapperFilter.doFilter (HttpServletRequestWrapperFilter.java:62) org.jasig.cas.client.session .SingleSignOutFilter.doFilter (SingleSignOutFilter.java:110)

근본 원인

sun.security.validator.Validato rException : PKIX 경로를 건물 실패 : sun.security.provider.certpath.SunCertPathBuilderException는 : 에없는 요청 대상 sun.security.validator.PKIXValidator.doBuild (PKIXValidator.java:385) sun.security에 유효한 인증 경로를 찾을 수 있습니다. validator.PKIXValidator.engineValidate (PKIXValidator.java:292) sun.security.validator.Validator.validate (Validator.java:260) sun.security.ssl.X509TrustManagerImpl.validate (X509TrustManagerImpl.java:326) sun.security .ssl.X509TrustManagerImpl.checkTrusted (X509TrustManagerImpl.java:231) sun.security.ssl.X509TrustManagerImpl.checkServerTrusted (X509TrustManagerImpl.java:126) sun.security.ssl.ClientHandshaker.serverCertificate (ClientHandshaker.java:1320)(클라이언트 쉐이크.) sun.security.ssl.SSLSocketImpl.readRecord (SSLSocketImpl.java:1032) sun.security.ssl.SSLSocketImpl.performInitialHandshake (SSLSocketImpl.java:1328) sun.security.ssl.SSLSocketImpl.startHandshake (SSLSocketImpl.java : 1355) sun.security.ssl.SSLSocketImpl.startHandshake (SSLSocketImpl.java:1339) sun.net.www.protocol.https.HttpsClient.afterConnect (HttpsClient.java:515) sun.net.www.protocol.https .AbstractDelegateHttpsURLConnection.connect (AbstractDelegateHttpsURLConnection.java:185) su nttpURLConnection.java : 1299) sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream (HttpsURLConnectionImpl.java:254) org.jasig.cas.client. util.CommonUtils.getResponseFromServer (CommonUtils.java:281) org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer (AbstractCasProtocolUrlBasedTicketValidator.java:33) org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate (AbstractUrlBasedTicketValidator는. 자바 : 178) org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter (AbstractTicketValidationFilter.java:132) org.jasig.cas.client.authentication.AuthenticationFilter.doFilter (AuthenticationFilter.java:102) org.jasig .cas.client.util.HttpServletRequestWrapperFilter.doFilter (HttpServletRequestWrapperFilter.java:62) org.jasig.cas.client.session.SingleSignOutFilter.doFilter (SingleSignOutFilter.java:110)

근본 원인

sun.security.provider.certpath .SunCertPathBuilderException는 : 에없는 요청 대상 sun.security.provider.certpath.SunCertPathBuilder.engineBuild (SunCertPathBuilder.java:196) java.security.cert.CertPathBuilder.build (CertPathBuilder.java:268) 에 유효한 인증 경로를 찾을 수 (PKIXValidator.java:380) sun.security.validator.PKI XValidator.engineValidate (PKIXValidator.java:292) sun.security.validator.Validator.validate (Validator.java:260) sun.security.ssl.X509TrustManagerImpl.validate (X509TrustManagerImpl.java:326) sun.security.ssl .X509TrustManagerImpl.checkTrusted (X509TrustManagerImpl.java:231) sun.security.ssl.X509TrustManagerImpl.checkServerTrusted (X509TrustManagerImpl.java:126) sun.security.ssl.ClientHandshaker.serverCertificate (ClientHandshaker.java:1320) sun.security. ssl.ClientHandshaker.processMessage (ClientHandshaker.java:154) sun.security.ssl.Handshaker.processLoop (Handshaker.java:868) sun.security.ssl.Handshaker.process_record (Handshaker.java:804) sun.security .ssl.SSLSocketImpl.readRecord (SSLSocketImpl.java:1) 032) sun.security.ssl.SSLSocketImpl.performInitialHandshake (SSLSocketImpl.java:1328) sun.security.ssl.SSLSocketImpl.startHandshake (SSLSocketImpl.java:1355) sun.security.ssl.SSLSocketImpl.startHandshake (SSLSocketImpl.java : 1339) sun.net.www.protocol.https.HttpsClient.afterConnect (HttpsClient.java:515) sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect (AbstractDelegateHttpsURLConnection.java:185) sun.net. www.protocol.http.HttpURLConnection.getInputStream (HttpURLConnection.java:1299) sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream (HttpsURLConnectionImpl.java:254) org.jasig.cas.client.util.CommonUtils. getResponseFromServer (CommonUtils.java:281) org.jasig.cas.clien t.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer (AbstractCasProtocolUrlBasedTicketValidator.java:33) org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate (AbstractUrlBasedTicketValidator.java:178) org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter (AbstractTicketValidationFilter.java:132) org.jasig.cas.client.authentication.AuthenticationFilter.doFilter (AuthenticationFilter.java:102) org.jasig.cas.client.util.HttpServletRequestWrapperFilter.doFilter (HttpServletRequestWrapperFilter.java:62) 조직 .jasig.cas.client.session.SingleSignOutFilter.doFilter (SingleSignOutFilter.java:110)

참고 근본 원인의 전체 스택 추적을 사용할 수 있습니다. Apache Tomcat/7.0.37 로그에 있습니다. Apache Tomcat/7.0.37

해결 방법을 찾을 수 없습니다.

Answer 1

https=true을 deployDescriptor.xml에 사용한다고 가정합니다. HTTPS와 CAS 작업을 할 중위 하나 개 keystore 파일

Creating a Keystore File