GWT CAS Tomcat部署失败

Question

我用CAS升级了我的GWT项目。当我在开发模式下测试它时，它工作得很好。现在我想把我的项目部署到Tomcat。当我运行它时，我可以到达CAS服务器。但是当CAS服务器将我引导回我的webapp时，我得到了这个错误。

说明服务器遇到一个内部错误，使其无法满足此请求。

例外

java.lang.runtimeException：javax.net.ssl.sslhandShakeException：sun.security.validator.validatorexCeption：PKIX路径构建失败：sun.security.provider.certpath.suncertPathBuilderException：无法找到请求的目标org.jasig.cas.client.util.commonutils.getResponseFromServer（commonutils.java:295)org.jasig.cas.client.validatoreXpertion：validate（AbstracturlBasedTicketValidator.java:178)org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter（AbstractTicketValidationFilter.java:132)org.jasig.cas.client.Authentication.Authentication.Authentication.AuthenticationFilter.doFilter（R.Java：110）

javax.net.ssl.sslhandShakeException：sun.security.validator.validatorexCeption：PKIX路径构建失败：sun.security.provider.certpath.suncertPathBuilderException：找不到请求的目标sun.security.ssl.alerts.getsslException（ServerCertificate java:1355)sun.security.ssl.sslsockeTimpl.starthandshake(sslsocketimpl.java:1339)sun.net.www.protocol.https.https.httpsclient.afterconnect(httpsclient.java:515)sun.net.www.protocol.httpsurlconnection.java:185)sun.net.www.protocol.httpsurlconnection.getInputstream(httpurlconnection.java:1299)sun.net.www.protocol.https.httpsurlconnection.getInputstream(httpsurlconnection.java:254)orgjasig.cas.client.validation.abstractCasProtocolURLBasedTicketValidator.retrieveresponseFromServer(abstractCasProtocolURLBasedTicketValidator.java:33)org.jasig.cas.client.validation.abstracturlBasedTicketValidator.validate(abstractTurlBasedTicketValidator.java:178)org.jasig.casedTicketValidator.validate(abstractTurlBasedTicketVLetRequestWrapperFilter.doFilter(httpServletRequestWrapperFilter.java:62)org.jasig.cas.client.session.SingleSignOutFilter.doFilter(SingleSignOutFilter.java:110)

根本原因

sun.security.validator.validatoreXception：PKIX路径构建失败：sun.security.provider.certpath.suncertPathBuilderException：找不到请求的目标sun.security.validator.pkixValidator.doBuild sl.x509TrustManagerImpl.checkTrust(x509TrustManagerImpl.java:231)sun.security.ssl.x509TrustManagerImpl.checkServerTrust(x509TrustManagerImpl.java:126)sun.security.ssl.clienthandShaker.serverCertificate.ReadRecord(SSLSOCKETIMPL.java:1032)sun.security.ssl.sslsocketimpl.performinitialhandshake(Sslsocketimpl.java:1328)sun.security.ssl.sslsocketimpl.starthandshake(Sslsocketimpl.java:1355)sun.security.ssl.sslsocketimpl.starthandshake(Sslsocketimpl.java:1339)sun.net.www.protocol.https.https.afterconnect(httpsclient.java:515)sun.net.www.protocol.https.abGetInputStream(httpurlconnection.java:1299)sun.net.www.protocol.https.httpsurlconnectionimpl.getInputStream(httpsurlconnectionimpl.java:254)org.jasig.cas.client.util.commonutils.getResponseFromServer(commonutils.java:281)org.jasig.cas.client.validation.abstractcasprotocolurlbasedticketvalidator.retrieveresponseFromServer(abstractcaspAssig.cas.client.validation.AbstractTicketValidationFildoFilter（AbstractTicketValidationFilter.java:132)org.jasig.cas.client.authentication.authenticationFilter.doFilter（AuthenticationFilter.java:102)org.jasig.cas.client.clientation.authenticationFilter.util.HttpServletRequestWrapperFilter.doFilter(httpServletRequestWrapperFilter.java:62)org.jasig.cas.clientFilter.java:110)

根本原因

sun.security.provider.certpath.suncertPathBuilderException：找不到请求的目标sun.security.provider.certpath.suncertPathBuilder.EngineBuild（suncertPathBuilder.java:196)java.security.certPathBuilder.build（certPathBuilder.java:268)sun.security.cert.certPathBuilder.build（.ssl.x509TrustManagerImpl.validate(x509TrustManagerImpl.java:326)sun.security.ssl.x509TrustManagerImpl.checkTrust(x509TrustManagerImpl.java:231)sun.security.ssl.x509TrustManagerImpl.checkServerTrust(x509TrustManagerImpl.java:126)sun.security.ssl.x509TrustManagerImpl.checkServerTrusted(x509TrustManagerImy.ssl.handshaker.process_record（Handshaker.java:804)sun.security.ssl.sslsocketimpl.ReadRecord(sslsocketimpl.java:1032)sun.security.ssl.sslsocketimpl.performinitialHandshake(Sslsocketimpl.java:1328)sun.security.ssl.sslsocketimpl.starthandShake(Sslsocketimpl.java:1355)sun.security.ssl.sslsocketimpl.starthandShake(Sslsocketimpl.javeHttpSurlConnection.Connect（AbstractDelegateHttpSurlConnection.java:185)sun.net.www.protocol.http.http.httpurlConnection.getInputStream（httpurlConnection.java:1299)sun.net.www.protocol.https.httpsurlConnectionImpl.getInputStream（httpsurlConnectionImpl.java:254)org.jasig.cas.client.util.getResponseFromServer（AbstracturlBasedTicketValidator.Validate（AbstractUrlBasedTicketValidator.java:178)org.jasig.cas.client.validation.abstractTicketValidationFilter.doFilter(abstractTicketValidationFilter.java:132)org.jasig.cas.client.authentication.authentication.authentication.authentication.authentication.authenticationFilter.doFilter(authenticationFilter.java:102)org.jasig.cas.clientfilter.doFilter(authenticationFilter.java:

注意：根本原因的完整堆栈跟踪可在Apache Tomcat/7.0.37日志中获得。Apache Tomcat/7.0.37

想不出怎么修好它。

Answer 1

我假设您在deploydescriptor.xml中启用了https=true。为了使CAS与https一起工作，您必须创建一个密钥库文件

创建密钥库文件