Question

• I am trying to integrate CAS on Liferay.
• I have separate CAS server running in secure port but i am using self-signed certificate
• I have a Liferay-6.1 in another server bundled with glassfish-3.1.1 server.
• I have imported required key file from CAS server using java keytool in server where Liferay is hosted

But I keep getting SSL error while trying to integrate from liferay CAS configuration page.

In my opinion, here glassfish is to be blamed because I have successfully configured and tested the same CAS server in Liferay-6.1 bundled with jboss-7.0 and also tested in liferay6.1 bundled with tomcat.
I tested all liferay bundles in the same server which means there is no error in importing certificate keys.

does anybody have anyidea how can I successfully configure secure CAS in liferay bundled with glassfish?

EDIT:

I traced the error and it is:

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

I remember this particular error while configuring self signed certificate before importing keys in other liferay bundles (jboss and tomcat). But it was gone after I imported CAS keys in keystore.

Answer 1

I copied from my comment:

Which keystore did you import the cert into on glassfish? There are two in the domain/config directory on glassfish, cacerts.jks and keystore.jks. Did you point the glassfish ssl listener at the new cert’s alias?