topic Bonjour j'ai CASifié Alfresco via un serveur distant... in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/bonjour-j-ai-casifi%C3%A9-alfresco-via-un-serveur-distant/m-p/58419#M35725 <HTML><HEAD></HEAD><BODY><SPAN>Bonjour j'ai CASifié Alfresco via un serveur distant machine.s_domain.domaine</SPAN><BR /><SPAN>Quand j'appelle Alfresco je suis correctement redirigé vres le CAS server qui me renvoi le formulaire d'authentification et valide le compte puis me redirige vers Alfresco qui me renvoie une erreur systeme:&nbsp;&nbsp; </SPAN><BR /><PRE class="language-none line-numbers"><CODE>javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target <BR />at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:150) <BR />at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1518) <BR />at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:174) <BR />at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:168) <BR />at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:848) <BR />at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:106) <BR />at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:495) <BR />at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:433) <BR />at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:818) <BR />at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1030) <BR />at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1057) <BR />at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1041) <BR />at sun.net.<A _jive_internal="true" href="https://community.alfresco.com/www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:402)" rel="nofollow noopener noreferrer">www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:402)</A> <BR />at sun.net.<A _jive_internal="true" href="https://community.alfresco.com/www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:170)" rel="nofollow noopener noreferrer">www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:170)</A> <BR />at sun.net.<A _jive_internal="true" href="https://community.alfresco.com/www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:938)" rel="nofollow noopener noreferrer">www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:938)</A> <BR />at sun.net.<A _jive_internal="true" href="https://community.alfresco.com/www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234)" rel="nofollow noopener noreferrer">www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234)</A> <BR />at edu.yale.its.tp.cas.util.SecureURL.retrieve(SecureURL.java:70) <BR />at edu.yale.its.tp.cas.client.ServiceTicketValidator.validate(ServiceTicketValidator.java:212) <BR />at edu.yale.its.tp.cas.client.filter.CASFilter.getAuthenticatedUser(CASFilter.java:219) <BR />at edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:184) <BR />at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) <BR />at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) <BR />at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213) <BR />at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178) <BR />at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126) <BR />at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105) <BR />at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107) <BR />at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148) <BR />at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869) <BR />at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664) <BR />at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527) <BR />at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80) <BR />at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684) <BR />at java.lang.Thread.run(Thread.java:595) <BR />Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target <BR />at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:221) <BR />at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:145) <BR />at sun.security.validator.Validator.validate(Validator.java:203) <BR />at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:172) <BR />at com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(SSLContextImpl.java:320) <BR />at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:841) <BR />… 29 more <BR />Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target <BR />at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:236) <BR />at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:194) <BR />at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:216) <BR />… 34 more<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN>j'ai besoin de votre aide. </SPAN><BR /><SPAN>Merci.</SPAN></BODY></HTML> Thu, 14 Jun 2007 15:52:16 GMT tegyat 2007-06-14T15:52:16Z Bonjour j'ai CASifié Alfresco via un serveur distant... https://connect.hyland.com/t5/alfresco-archive/bonjour-j-ai-casifi%C3%A9-alfresco-via-un-serveur-distant/m-p/58419#M35725 Bonjour j'ai CASifié Alfresco via un serveur distant machine.s_domain.domaineQuand j'appelle Alfresco je suis correctement redirigé vres le CAS server qui me renvoi le formulaire d'authentification et valide le compte puis me redirige vers Alfresco qui me renvoie une erreur systeme:&nbsp;&nbsp; javax.net.ssl. Thu, 14 Jun 2007 15:52:16 GMT https://connect.hyland.com/t5/alfresco-archive/bonjour-j-ai-casifi%C3%A9-alfresco-via-un-serveur-distant/m-p/58419#M35725 tegyat 2007-06-14T15:52:16Z Re: Bonjour j'ai CASifié Alfresco via un serveur distant... https://connect.hyland.com/t5/alfresco-archive/bonjour-j-ai-casifi%C3%A9-alfresco-via-un-serveur-distant/m-p/58420#M35726 <HTML><HEAD></HEAD><BODY><SPAN>Bonjour,</SPAN><BR /><BR /><SPAN>Il faut tout simplement que tu ajoutes le certificat utilisé pour le SSL du serveur CAS dans le keystore de la JDK qui est utilisée par Alfresco. Le client CAS contacte le serveur CAS en HTTPS pour valider le ticket, et s'il ne reconnait pas le certificat il renvoit ce genre d'erreur.</SPAN></BODY></HTML> Fri, 15 Jun 2007 06:24:37 GMT https://connect.hyland.com/t5/alfresco-archive/bonjour-j-ai-casifi%C3%A9-alfresco-via-un-serveur-distant/m-p/58420#M35726 lme 2007-06-15T06:24:37Z