Pre Requisites for CAS
Now before going on to the discussion on Custom Credential To Principal Resolver which requires attribute Repository for fetching user attributes from the underlying repository, In this post I will take up the issue of configuring CAS to use over HTTPS. While configuring CAS over Https I faced the exception Error javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Though I have configured custom HostNameverifier still I was facing the above error. The reason behind the above error i found out is that the certificate which i was using was not added to the truststore. This issue can be resolved with the following steps: 1) Locate the cacerts file from the JDK, which the server is using. The usual path is jdk1.6.0_05\jre\lib\security\cacerts 2) Run the following command from the command promt: