http://www.stevelongdo.com/articles/2005/12/12/tomcat-5-5-java-5-and-ssl en-us 40 I ran into a puzzling situation trying to setup <a href="https://clearinghouse.ja-sig.org/wiki/display/CAS/Home">Yale's CAS</a> and the <a href="http://www.springframework.org/">Spring Framework</a>/<a href="http://acegisecurity.sourceforge.net">Acegi </a> contacts sample application on my workstation. I had CAS deployed on <a href="http://tomcat.apache.org/">Tomcat 5.5</a> and the <a href="http://acegisecurity.sourceforge.net/">Acegi</a> sample application deployed on <a href="http://www.bea.com/framework.jsp?CNT=index.htm&FP=/content/products/weblogic">BEA WebLogic 9.0</a>, both running under <a href="http://java.sun.com">Sun's JDK 1.5.0_06</a>. I kept getting errors like:<div style="overflow: auto;"><typocode><pre>Your CAS credentials were rejected.<br/> Reason: HTTPS hostname wrong: &lt;localhost> should be <127.0.0.1></pre></typocode></div> I couldn't figure this out because the <typocode>server.xml</typocode> for <a href="http://tomcat.apache.org/">Tomcat</a> included both the <typocode>keystoreFile</typocode> and <typocode>truststoreFile</typocode> parameters for the SSL connection. The JVM JRE cacerts file included self-signed certs for both the <a href="http://www.bea.com/framework.jsp?CNT=index.htm&FP=/content/products/weblogic">BEA </a> server and the <a href="http://tomcat.apache.org/">Tomcat</a> server which should be picked up system wide whether or not I specifically include it in the <typocode>server.xml</typocode> file. I am not sure why but putting the following option on the <a href="http://tomcat.apache.org/">Tomcat</a> command line solved the problem:<br/><div style="overflow: auto; "><typocode><pre>-Djavax.net.ssl.trustStore="C:\Program Files\Java\jre1.5.0_06\lib\security\cacerts"</pre></typocode> </div>You can also see from this that it is a Windows workstation... I am documenting this for the benefit of other programmers and Google (which doesn't have much of anything about this particular problem). Mon, 12 Dec 2005 20:30:00 +0000 urn:uuid:29735744-1a78-4ba9-a691-45d15917f441 Steve Longdo http://www.stevelongdo.com/articles/2005/12/12/tomcat-5-5-java-5-and-ssl java tomcat bea spring acegi http://www.stevelongdo.com/articles/trackback/34 nice xmas theme but it's still wierd in ie. fyi... Thu, 15 Dec 2005 22:35:09 +0000 urn:uuid:705864c4-efde-4c92-84da-de3f2e8096db http://www.stevelongdo.com/articles/2005/12/12/tomcat-5-5-java-5-and-ssl#comment-37 Thanks Sen-dog! If only my employer would see the light as well. I hope to be doing some Rails informational posting in the very near future... Tue, 13 Dec 2005 18:33:01 +0000 urn:uuid:397f4aba-0919-4e12-b985-e2200a0d9d81 http://www.stevelongdo.com/articles/2005/12/12/tomcat-5-5-java-5-and-ssl#comment-36 gem install rails Tue, 13 Dec 2005 18:28:50 +0000 urn:uuid:a718faec-87a5-4c6b-81e9-a48ba63dbf32 http://www.stevelongdo.com/articles/2005/12/12/tomcat-5-5-java-5-and-ssl#comment-35