Is this IP SSL certificate problem?

View: New views

2 Messages — Rating Filter: Alert me

Is this IP SSL certificate problem?

by Ali Abdel-Aziz Ali :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi All,

I have a problem with SSL (as I guess) as when I tried to test my application on the stand alone OC4J on windows with tomcat on the windows machine, it worked greatly but using computerName (to refer to my machine).

But when I tried to just deploy my application to a testing linux machine and make it point to the cas server deployed on my windows machine.
OR
when I tried to use my linux testing server and created certificate using the testing server ip address instead of the computerName that I used on my machine and configured tomcat on the linux machine using this certificate I got the below error page

the problem is:
when I try to access a secured page it redirect me to the cas server (tomcat deployed on the ) for authentication and after successfull login it should redirect me back to the secured page. but instead it redirect me to the following URL http://10.1.119.57/eps/casfailed.jsp and this page contains the following not found error message

404 Not Found
OracleJSP: java.io.FileNotFoundException: /u01/app/oracle/products/10gias/j2ee/OC4J_EPS/applications/eps/eps/casfailed.jsp (No such file or directory)

so I guess this issue is related to the SSL certificate created.

By the way I couldn't find the casfailed.jsp till now so if any one have it please send it to me.

below is the tomcat logs on the testing machine

$ tail -f logs/catalina.2008-05-13.log
May 13, 2008 7:01:00 PM org.apache.coyote.http11.Http11BaseProtocol start
INFO: Starting Coyote HTTP/1.1 on http-8443
May 13, 2008 7:01:00 PM org.apache.jk.common.ChannelSocket init
INFO: JK: ajp13 listening on /0.0.0.0:8009
May 13, 2008 7:01:00 PM org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=0/45 config=null
May 13, 2008 7:01:00 PM org.apache.catalina.storeconfig.StoreLoader load
INFO: Find registry server-registry.xml at classpath resource
May 13, 2008 7:01:01 PM org.apache.catalina.startup.Catalina start
INFO: Server startup in 9836 ms
♥$ tail -f logs/catalina.out
INFO: Jk running ID=0 time=0/45 config=null
May 13, 2008 7:01:00 PM org.apache.catalina.storeconfig.StoreLoader load
INFO: Find registry server-registry.xml at classpath resource
May 13, 2008 7:01:01 PM org.apache.catalina.startup.Catalina start
INFO: Server startup in 9836 ms
2008-05-13 19:01:17,239 INFO [org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner] - <Starting cleaning of expired tickets from ticket registry a
t [Tue May 13 19:01:17 GMT+03:00 2008]>
2008-05-13 19:01:17,239 INFO [org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner] - <0 found to be removed. Removing now.>
2008-05-13 19:01:17,240 INFO [org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner] - <Finished cleaning of expired tickets from ticket registry a
t [Tue May 13 19:01:17 GMT+03:00 2008]>
2008-05-13 19:03:38,193 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - <AuthenticationHandler: org.jasig.cas.adaptors.jdbc.SearchModeSearchData
baseAuthenticationHandler successfully authenticated the user.>
2008-05-13 19:03:38,209 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service ticket [ST-2-ryxqQnuFVqoh46z6HdQlCq0PcPDG6fDdcWU-20] for servic
e [http://10.1.119.57/eps/j_acegi_cas_security_check] for user [aabdelaziz]>
2008-05-13 19:05:02,631 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - <AuthenticationHandler: org.jasig.cas.adaptors.jdbc.SearchModeSearchData
baseAuthenticationHandler successfully authenticated the user.>
2008-05-13 19:05:02,632 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service ticket [ST-3-tWbnGYXbFVa9WVPIUrmb29b06Z1jvwKbyiy-20] for servic
e [http://10.1.119.57/eps/j_acegi_cas_security_check] for user [aabdelaziz]>

Can anybody helps?

thanks in advance.

--
Ali Abdel-Aziz
http://www.aliabdelaziz.com
_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

Re: Is this IP SSL certificate problem?

by scott_battaglia :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Test SSL certificates must contain the computer name and not the IP address.

-Scott

2008/5/13 Ali Abdel-Aziz Ali <robinhoo.2006@...>:

Hi All,

I have a problem with SSL (as I guess) as when I tried to test my application on the stand alone OC4J on windows with tomcat on the windows machine, it worked greatly but using computerName (to refer to my machine).

But when I tried to just deploy my application to a testing linux machine and make it point to the cas server deployed on my windows machine.
OR
when I tried to use my linux testing server and created certificate using the testing server ip address instead of the computerName that I used on my machine and configured tomcat on the linux machine using this certificate I got the below error page

the problem is:
when I try to access a secured page it redirect me to the cas server (tomcat deployed on the ) for authentication and after successfull login it should redirect me back to the secured page. but instead it redirect me to the following URL http://10.1.119.57/eps/casfailed.jsp and this page contains the following not found error message

404 Not Found
OracleJSP: java.io.FileNotFoundException: /u01/app/oracle/products/10gias/j2ee/OC4J_EPS/applications/eps/eps/casfailed.jsp (No such file or directory)

so I guess this issue is related to the SSL certificate created.

By the way I couldn't find the casfailed.jsp till now so if any one have it please send it to me.

below is the tomcat logs on the testing machine

$ tail -f logs/catalina.2008-05-13.log
May 13, 2008 7:01:00 PM org.apache.coyote.http11.Http11BaseProtocol start
INFO: Starting Coyote HTTP/1.1 on http-8443
May 13, 2008 7:01:00 PM org.apache.jk.common.ChannelSocket init
INFO: JK: ajp13 listening on /0.0.0.0:8009
May 13, 2008 7:01:00 PM org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=0/45 config=null
May 13, 2008 7:01:00 PM org.apache.catalina.storeconfig.StoreLoader load
INFO: Find registry server-registry.xml at classpath resource
May 13, 2008 7:01:01 PM org.apache.catalina.startup.Catalina start
INFO: Server startup in 9836 ms
♥$ tail -f logs/catalina.out
INFO: Jk running ID=0 time=0/45 config=null
May 13, 2008 7:01:00 PM org.apache.catalina.storeconfig.StoreLoader load
INFO: Find registry server-registry.xml at classpath resource
May 13, 2008 7:01:01 PM org.apache.catalina.startup.Catalina start
INFO: Server startup in 9836 ms
2008-05-13 19:01:17,239 INFO [org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner] - <Starting cleaning of expired tickets from ticket registry a
t [Tue May 13 19:01:17 GMT+03:00 2008]>
2008-05-13 19:01:17,239 INFO [org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner] - <0 found to be removed. Removing now.>
2008-05-13 19:01:17,240 INFO [org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner] - <Finished cleaning of expired tickets from ticket registry a
t [Tue May 13 19:01:17 GMT+03:00 2008]>
2008-05-13 19:03:38,193 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - <AuthenticationHandler: org.jasig.cas.adaptors.jdbc.SearchModeSearchData
baseAuthenticationHandler successfully authenticated the user.>
2008-05-13 19:03:38,209 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service ticket [ST-2-ryxqQnuFVqoh46z6HdQlCq0PcPDG6fDdcWU-20] for servic
e [http://10.1.119.57/eps/j_acegi_cas_security_check] for user [aabdelaziz]>
2008-05-13 19:05:02,631 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - <AuthenticationHandler: org.jasig.cas.adaptors.jdbc.SearchModeSearchData
baseAuthenticationHandler successfully authenticated the user.>
2008-05-13 19:05:02,632 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service ticket [ST-3-tWbnGYXbFVa9WVPIUrmb29b06Z1jvwKbyiy-20] for servic
e [http://10.1.119.57/eps/j_acegi_cas_security_check] for user [aabdelaziz]>

Can anybody helps?

thanks in advance.

--
Ali Abdel-Aziz
http://www.aliabdelaziz.com
_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

--
-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia
_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas