<rt id="bn8ez"></rt>
<label id="bn8ez"></label>
  • 

    • <span id="bn8ez"></span>
    

    <label id="bn8ez"><meter id="bn8ez"></meter></label>
    

    
    

    




    







												


        

    David.Turing's blog
    

    

     
    
			
    
				
					
	
    
		
    
			Yale CAS異常問(wèn)題總結(jié)(1)Unable to validate ProxyTicketValidator之HTTPS hostname wrong:  should be.....
		
    
		
    
				嚴(yán)重: edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to validate ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator prox
    yList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator casValidateUrl=[https://192.168.1.111:8443/cas/proxyValidate] ticket=[ST-0-9h7Mx5HK3pfsdxRv
    MD3y] service=[http%3A%2F%2F192.168.1.222%3A8080%2Fservlets-examples%2Fservlet%2FHelloWorldExample] renew=false]]]
    
				
    
				
    這個(gè)CAS異常是從CAS Client里面拋出，是當(dāng)我們不使用證書(shū)的CN去訪問(wèn)域名的時(shí)候（比如下文是用IP訪問(wèn)而且證書(shū)的CN是該IP對(duì)應(yīng)的域名而非該IP），CASClient無(wú)法信任，因?yàn)槟阕C書(shū)的CN命名寫(xiě)著abc.com，192.168.1.111這個(gè)IP是無(wú)法被CAS Client識(shí)別。
    
		
    
				
				edu.yale.its.tp.cas.client.CASAuthenticationException:?Unable?to?validate?ProxyTicketValidator?[[edu.yale.its.tp.cas.client.ProxyTicketValidator?proxyList
				=
				[
				null
				]?[edu.yale.its.tp.cas.client.ServiceTicketValidator?casValidateUrl
				=
				[https:
				//
				192.168.1.111:8443/cas/proxyValidate]?ticket=[ST-0-9h7Mx5HK3pfsdxRvMD3y]?service=[http%3A%2F%2F192.168.1.222%3A8080%2Fservlets-examples%2Fservlet%2FHelloWorldExample]?renew=false]]]
				
						
    
						
				    
				????at?edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:
				52
				)
    ????at?edu.yale.its.tp.cas.client.filter.CASFilter.getAuthenticatedUser(CASFilter.java:    
				455
				)
    ????at?edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:    
				378
				)
    ????at?org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:    
				202
				)
    ????at?org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:    
				173
				)
    ????at?filters.ExampleFilter.doFilter(ExampleFilter.java:    
				101
				)
    ????at?org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:    
				202
				)
    ????at?org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:    
				173
				)
    ????at?org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:    
				213
				)
    ????at?org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:    
				178
				)
    ????at?org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:    
				432
				)
    ????at?org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:    
				126
				)
    ????at?org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:    
				105
				)
    ????at?org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:    
				107
				)
    ????at?org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:    
				148
				)
    ????at?org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:    
				869
				)
    ????at?org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:    
				664
				)
    ????at?org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:    
				527
				)
    ????at?org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:    
				80
				)
    ????at?org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:    
				684
				)
    ????at?java.lang.Thread.run(Thread.java:    
				595
				)
    Caused?by:?java.io.IOException:?HTTPS?hostname?wrong:??should?be?    
				<
				192.168
				.
				1.111
				>
				
						
    
						????at?sun.net.www.protocol.https.HttpsClient.checkURLSpoofing(HttpsClient.java:    
				493
				)
    ????at?sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:    
				418
				)
    ????at?sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:    
				170
				)
    ????at?sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:    
				905
				)
    ????at?sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:    
				234
				)
    ????at?edu.yale.its.tp.cas.util.SecureURL.retrieve(SecureURL.java:    
				84
				)
    ????at?edu.yale.its.tp.cas.client.ServiceTicketValidator.validate(ServiceTicketValidator.java:    
				212
				)
    ????at?edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:    
				50
				)
		
    
		
    解決辦法：
    用域名訪問(wèn)，域名就是證書(shū)的CN。
		
    
			posted on 2006-09-05 18:20 david.turing 閱讀(9527) 評(píng)論(4)  編輯  收藏  所屬分類: Security異常問(wèn)題 
		
    
	
    
	
	


	


    
	    
    


    

    評(píng)論
    
	
	
			
    
				# re: Yale CAS異常問(wèn)題總結(jié)(1)Unable to validate ProxyTicketValidator之HTTPS hostname wrong:  should be.....[未登錄](méi)
					
						2007-03-23 02:32
					
				lulu
			
    
			
    
				client 怎么得到授權(quán)??

    就keytool -import....到j(luò)vm就行了???

    

    但是我還是報(bào)上面的錯(cuò)誤..  回復(fù)  更多評(píng)論
				  
			
    
		
			
    
				# re: Yale CAS異常問(wèn)題總結(jié)(1)Unable to validate ProxyTicketValidator之HTTPS hostname wrong:  should be.....[未登錄](méi)
					
						2008-12-25 16:04
					
				1
			
    
			
    
				要是別的機(jī)器訪問(wèn)你的機(jī)器，用ip訪問(wèn)，cn我也寫(xiě)的ip，也還是報(bào)同樣錯(cuò)誤  回復(fù)  更多評(píng)論
				  
			
    
		
			
    
				# re: Yale CAS異常問(wèn)題總結(jié)(1)Unable to validate ProxyTicketValidator之HTTPS hostname wrong:  should be.....[未登錄](méi)
					
						2011-08-30 18:20
					
				小豬
			
    
			
    
				我的也是啊，用ip生成的cn，也是用ip訪問(wèn)，還是報(bào)這個(gè)錯(cuò)誤啊  回復(fù)  更多評(píng)論
				  
			
    
		
			
    
				# re: Yale CAS異常問(wèn)題總結(jié)(1)Unable to validate ProxyTicketValidator之HTTPS hostname wrong:  should be.....[未登錄](méi)
					
						2012-10-24 16:55
					
				cx
			
    
			
    
				edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to validate ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator casValidateUrl=[https://cx.com:8443/cas/proxyValidate] ticket=[ST-1-BS35zseNBoCQaZwNWjUu-cas] service=[http%3A%2F%2Fcx.com%3A8080%2Fjsp-examples%2F] renew=false]]]

     使用域名依舊錯(cuò)誤……  回復(fù)  更多評(píng)論
				  
			
    
		

    




    








    

				
			
    
			
    
				
					

    導(dǎo)航
    

					

    統(tǒng)計(jì)
    
	
					
					

    常用鏈接
    


    留言簿(110)
    



    我參與的團(tuán)隊(duì)
    


		
    隨筆分類(126)
    
		
				
			
	
		
    隨筆檔案(155)
    
		
				
			
	
		
    文章分類(9)
    
		
				
			
	
		
    文章檔案(19)
    
		
				
			
	
		
    相冊(cè)
    
		
				
			
	



    搜索
    



    積分與排名
    



    最新隨筆
    

    


    


    最新評(píng)論
	
    

    
	
			
		

    


    閱讀排行榜
    

    
	
			
		

    


    評(píng)論排行榜
    

    
	
			
		

    

				
			
    			
			

	

    







    
        
	



主站蜘蛛池模板：
久久狠狠爱亚洲综合影院|
在线日韩日本国产亚洲|
成人无码区免费A片视频WWW|
4虎1515hh永久免费|
91麻豆国产免费观看|
1000部啪啪毛片免费看|
国产精品爱啪在线线免费观看|
1000部拍拍拍18勿入免费凤凰福利
|
青青在线久青草免费观看|
成人黄色免费网址|
无码人妻一区二区三区免费|
妞干网免费观看视频|
日韩免费三级电影|
四虎永久成人免费|
久久久久亚洲av成人无码电影|
精品亚洲一区二区三区在线播放|
亚洲欧洲国产精品香蕉网|
亚洲不卡中文字幕无码|
亚洲黄网站wwwwww|
33333在线亚洲|
亚洲av无码专区在线观看下载|
黄色a级片免费看|
久久久久久国产a免费观看不卡|
久久av免费天堂小草播放|
香蕉免费一区二区三区|
免费视频专区一国产盗摄|
精品免费国产一区二区|
亚洲综合久久夜AV |
亚洲av综合色区|
亚洲1234区乱码|
国产AV无码专区亚洲AV麻豆丫|
久草免费福利在线|
91热久久免费精品99|
嫩草影院免费观看|
爱情岛论坛网亚洲品质自拍|
久久精品国产精品亚洲蜜月|
亚洲一区中文字幕在线电影网|
福利片免费一区二区三区|
久久大香伊焦在人线免费|
黄瓜视频高清在线看免费下载|
免费人成在线观看视频播放|