At Washtenaw Community College Ann Arbor Michigan I am working to replace a
old CAS 3.x server with a new CAS 6.2 server running on RHEL 8.1
We have encountered an error when we perform a 'gradlew run' command in
which we see this error:
AS Version: 6.2.0-SNAPSHOT
CAS Branch: master
CAS Commit Id: 4ac819eb72848f0ca995bb369526727479fa8cbf
CAS Build Date/Time: 2020-06-16T19:16:54Z
Spring Boot Version: 2.2.8.RELEASE
Spring Version: 5.2.6.RELEASE
Java Home: /usr/lib/jvm/java-11-openjdk-11.0.7.10-1.el8_1.x86_64
Java Vendor: Oracle Corporation
Java Version: 11.0.7
JVM Free Memory: 409 MB
JVM Maximum Memory: 2 GB
JVM Total Memory: 478 MB
JCE Installed: Yes
OS Architecture: amd64
OS Name: Linux
OS Version: 4.18.0-147.5.1.el8_1.x86_64
OS Date/Time: 2020-06-16T15:56:59.381046
OS Temp Directory: /tmp
Apache Tomcat Version: Apache Tomcat/9.0.36
------------------------------------------------------------
2020-06-16 15:02:49,204 INFO
[org.apereo.cas.configuration.DefaultCasConfigurationPropertiesSourceLocator]
- <Configuration files found at [/etc/cas/config] are [[file
[/etc/cas/config/cas.properties]]] unde r
profile(s) [[standalone]]>
2020-06-16 15:02:49,381 INFO [org.apereo.cas.web.CasWebApplication] - <The
following profiles are active: standalone>
2020-06-16 15:02:52,616 INFO
[org.apereo.cas.configuration.CasConfigurationPropertiesValidator] -
<Application context has validated CAS property sources and configuration
successfully.>
2020-06-16 15:03:00,848 INFO
[org.springframework.boot.autoconfigure.security.servlet.UserDetailsServiceAutoConfiguration]
- <
Using generated security password: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
>
2020-06-16 15:03:01,045 INFO
[org.springframework.security.web.access.channel.ChannelProcessingFilter] -
<Validated configuration attributes>
2020-06-16 15:03:01,063 INFO
[org.springframework.security.web.DefaultSecurityFilterChain] - <Creating
filter chain: any request,
[org.springframework.security.web.access.channel.ChannelProcessingFilter@1a6d
c5ea,
org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter@3d88ce0e,
org.springframework.security.web.context.SecurityContextPersistenceFilter@31b741e2,
org.springframework
.security.web.savedrequest.RequestCacheAwareFilter@28f05b0c,
org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter@5fdb7394,
org.springframework.security.web.authentication.Anon
ymousAuthenticationFilter@31f7eb8,
org.springframework.security.web.session.SessionManagementFilter@1846ad0f,
org.springframework.security.web.access.ExceptionTranslationFilter@432c0f1,
org.springframework.s
ecurity.web.access.intercept.FilterSecurityInterceptor@70884875]>
2020-06-16 15:03:02,145 ERROR
[org.ldaptive.transport.netty.NettyConnection] - <Connection open failed
for
org.ldaptive.transport.netty.NettyConnection@193667460::ldapUrl=[org.ldaptive.LdapURL@-120939274::sc
heme=ldaps, hostname=walnut.wccnet.edu, port=636, baseDn=null,
attributes=null, scope=null, filter=null, inetAddress=null], isOpen=false,
connectTime=null,
connectionConfig=[org.ldaptive.ConnectionConfig@697
975769::ldapUrl=ldaps://walnut.wccnet.edu:636, connectTimeout=PT5S,
responseTimeout=PT5S, reconnectTimeout=PT2M, autoReconnect=true,
autoReconnectCondition=org.ldaptive.ConnectionConfig$$Lambda$953/0x0000000
8408e9840@ccd000e, autoReplay=true,
sslConfig=[org.ldaptive.ssl.SslConfig@1604700367::credentialConfig=null,
trustManagers=null,
hostnameVerifier=org.ldaptive.ssl.DefaultHostnameVerifier@d7055be,
enabledCiph erSuites=null, enabledProtocols=null,
handshakeCompletedListeners=null, handshakeTimeout=PT1M],
useStartTLS=false,
connectionInitializers=[org.ldaptive.BindConnectionInitializer@862862306::bindDn=cn=CAS
Auth ,OU=Utility,dc=wccnet,dc=edu,
bindSaslConfig=null, bindControls=null],
connectionStrategy=org.ldaptive.ActivePassiveConnectionStrategy@768f4b42,
connectionValidator=null], channel=null>
org.ldaptive.ConnectException: javax.net.ssl.SSLException:
javax.net.ssl.SSLHandshakeException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid cer tification path to requested target
So far GOOGLE-FU has failed to reveal the solution to resolving this
problem... i see HINTS that it might be related to an SSL cert java
keystore issue, but my attempts to follow various 'solutions' so far are
not working.
Any ideas or suggestions would be appreciated.
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/27f5546e-d1e1-4715-932a-7e5a274d9157o%40apereo.org.
