@@ -16,7 +16,7 @@ Ubuntu 16.04.1 LTS,安装有JDK、Tomcat等工具,主要作为CAS Server和W
1616
1717Linux服务器端安装JDK主要是作为Tomcat的运行时环境,并提供keytool等工具进行HTTPS配置;Windows客户端安装JDK主要是作为Maven的运行时环境。
1818
19- jiangxin@tomcat :~ $ java -version
19+ jiangxin@ubuntu11 :~ $ java -version
2020java version "1.8.0_121"
2121Java(TM) SE Runtime Environment (build 1.8.0_121-b13)
2222Java HotSpot(TM) 64-Bit Server VM (build 25.121-b13, mixed mode)
@@ -45,48 +45,8 @@ OS name: "windows 10", version: "10.0", arch: "amd64", family: "dos"
4545
4646### Tomcat
4747
48- 安装在Linux,安装包为:
49- apache-tomcat-8.5.14.tar.gz
50- 为了更好的模拟单点登录,需要安装三个Tomcat实例,其中一个作为CAS Server,另外两个作为CAS Client。具体分配
51-
52- 安装过程为:
53- jiangxin@tomcat:/usr/local$ sudo mkdir tomcat
54- jiangxin@tomcat:/usr/local$ sudo chown -R jiangxin: jiangxin tomcat/
55- jiangxin@tomcat:/usr/local$ cd tomcat/
56- jiangxin@tomcat:/usr/local/tomcat$ ls
57- jiangxin@tomcat:/usr/local/tomcat$ tar -zxvf apache-tomcat-8.5.14.tar.gz
58- jiangxin@tomcat:/usr/local/tomcat$ cd
59-
60- jiangxin@tomcat:~ $ sudo vim /etc/profile
61-
62- export CATALINA_BASE=/usr/local/tomcat/apache-tomcat-8.5.14
63- export CATALINA_HOME=/usr/local/tomcat/apache-tomcat-8.5.14
64- export PATH=$PATH:$CATALINA_HOME/lib:$CATALINA_HOME/bin
65-
66- jiangxin@tomcat:~ $ source /etc/profile
67-
68- jiangxin@tomcat:~ $ startup.sh ; tailf $CATALINA_HOME/logs/catalina.out
69- Using CATALINA_BASE: /usr/local/tomcat/apache-tomcat-8.5.14
70- Using CATALINA_HOME: /usr/local/tomcat/apache-tomcat-8.5.14
71- Using CATALINA_TMPDIR: /usr/local/tomcat/apache-tomcat-8.5.14/temp
72- Using JRE_HOME: /usr/local/java/jdk1.8.0_121
73- #限于篇幅,此处有省略
74- 05-May-2017 20:27:53.487 信息 [ main] org.apache.catalina.startup.Catalina.start Server startup in 1633 ms
75-
76-
77- 在浏览器中访问下面地址,查看能否正常访问:
78-
79- http://192.168.1.130:8080/
80-
81-
82- ![ ] ( https://raw.githubusercontent.com/jiangxincode/PicGo/master/aloys_build_manual/image191.png )
83-
84- jiangxin@tomcat:~ $ shutdown.sh
85- Using CATALINA_BASE: /usr/local/tomcat/apache-tomcat-8.5.14
86- Using CATALINA_HOME: /usr/local/tomcat/apache-tomcat-8.5.14
87- Using CATALINA_TMPDIR: /usr/local/tomcat/apache-tomcat-8.5.14/temp
88- Using JRE_HOME: /usr/local/java/jdk1.8.0_121
89- Using CLASSPATH: /usr/local/tomcat/apache-tomcat-8.5.14/bin/bootstrap.jar:/usr/local/tomcat/apache-tomcat-8.5.14/bin/tomcat-juli.jar
48+ 为了更好的模拟单点登录,需要安装三个Tomcat实例,其中一个作为CAS Server,另外两个作为CAS Client。
49+ 安装过程略
9050
9151### 安装CAS服务端
9252
@@ -183,7 +143,7 @@ CAS要求CAS Server和CAS Client以及客户端浏览器端全部使用https访
183143下边的命令,会创建一条证书记录并写入cacerts。证书记录信息包含该条证书的私钥,公钥和对应的数字证书的信息。
184144
185145``` shell
186- jiangxin@tomcat :~ $ keytool -genkey -alias castest -keyalg RSA -keystore /usr/local/java/jdk1.8.0_121/jre/lib/security/cacerts
146+ jiangxin@ubuntu11 :~ $ keytool -genkey -alias castest -keyalg RSA -keystore /usr/local/java/jdk1.8.0_121/jre/lib/security/cacerts
187147输入密钥库口令: # 按照JDK后,默认的密钥库密码为changeit
188148您的名字与姓氏是什么? # 名字与姓氏为CAS跳转域名
189149 [Unknown]: cas.sso.com
@@ -205,17 +165,17 @@ CN=cas.sso.com, OU=castest, O=castest, L=nanjing, ST=jiangsu, C=cn是否正确?
205165```
206166
207167可使用如下命令查看证书信息:
208- jiangxin@tomcat :~ $ keytool -list -keystore "$JAVA_HOME/jre/lib/security/cacerts" -alias castest
168+ jiangxin@ubuntu11 :~ $ keytool -list -keystore "$JAVA_HOME/jre/lib/security/cacerts" -alias castest
209169输入密钥库口令:
210170castest, 2017-5-7, PrivateKeyEntry,
211171证书指纹 (SHA1): 9A:9A:DF:AB:18:B7:D9:81:8D:24:BA:E3:73:99:67:CE:58:B0:3A: CD
212172
213173如果要更新证书,可以先删除原证书,再导入新证书:
214- jiangxin@tomcat :~ $ keytool -delete -alias castest -keystore /usr/local/java/jdk1.8.0_121/jre/lib/security/cacerts
174+ jiangxin@ubuntu11 :~ $ keytool -delete -alias castest -keystore /usr/local/java/jdk1.8.0_121/jre/lib/security/cacerts
215175
216176接下来修改server.xml文件
217- jiangxin@tomcat :~ $ cp /usr/local/tomcat/apache-tomcat-8.5.14/conf/server.xml /usr/local/tomcat/apache-tomcat-8.5.14/conf/server.xml.bak
218- jiangxin@tomcat :~ $ vim /usr/local/tomcat/apache-tomcat-8.5.14/conf/server.xml
177+ jiangxin@ubuntu11 :~ $ cp /usr/local/tomcat/apache-tomcat-8.5.14/conf/server.xml /usr/local/tomcat/apache-tomcat-8.5.14/conf/server.xml.bak
178+ jiangxin@ubuntu11 :~ $ vim /usr/local/tomcat/apache-tomcat-8.5.14/conf/server.xml
219179
220180``` xml
221181<Connector port =" 8443" protocol =" org.apache.coyote.http11.Http11NioProtocol"
@@ -243,15 +203,15 @@ https://192.168.1.130:8443/cas
243203
244204导出数字证书,数字证书包含三部分信息:证书元数据信息,序列号,过期时间等、所有者信息,姓名、地区等、所有者公钥;相比于在keystore中的信息,没有所有者的密钥,所有者的密钥只有所有者自己知道,而此处的数字证书是要分发到公网上的。
245205
246- jiangxin@tomcat :~ $ keytool -export -file ssokey/castest.crt -alias castest -keystore ssokey/castest
206+ jiangxin@ubuntu11 :~ $ keytool -export -file ssokey/castest.crt -alias castest -keystore ssokey/castest
247207输入密钥库口令:
248208存储在文件 <ssokey/castest.crt> 中的证书
249209
250210
251- jiangxin@tomcat :~ $ keytool -import -keystore "$JAVA_HOME/jre/lib/security/cacerts" -file ssokey/castest.crt -alias castest
211+ jiangxin@ubuntu11 :~ $ keytool -import -keystore "$JAVA_HOME/jre/lib/security/cacerts" -file ssokey/castest.crt -alias castest
252212输入密钥库口令:
253213keytool 错误: java.io.IOException: Keystore was tampered with, or password was incorrect
254- jiangxin@tomcat :~ $ keytool -import -keystore "$JAVA_HOME/jre/lib/security/cacerts" -file ssokey/castest.crt -alias castest
214+ jiangxin@ubuntu11 :~ $ keytool -import -keystore "$JAVA_HOME/jre/lib/security/cacerts" -file ssokey/castest.crt -alias castest
255215输入密钥库口令:
256216所有者: CN=cas.sso.com, OU=castest, O=castest, L=nanjing, ST=jiangsu, C=cn
257217发布者: CN=cas.sso.com, OU=castest, O=castest, L=nanjing, ST=jiangsu, C=cn
@@ -302,8 +262,8 @@ https://cas.sso.com:8443/casclient/index.jsp;jsessionid=23551AEBF9B7B61431D0CC94
302262
303263为了防止在不同地方启动tomcat,导致日志位置不同,不方便查找,修改一下日志路径。
304264
305- jiangxin@tomcat :/usr/local/tomcat/apache-tomcat-8.5.14/webapps/cas/WEB-INF/classes$ cp log4j2.xml log4j2.xml.bak
306- jiangxin@tomcat :/usr/local/tomcat/apache-tomcat-8.5.14/webapps/cas/WEB-INF/classes$ vim log4j2.xml
265+ jiangxin@ubuntu11 :/usr/local/tomcat/apache-tomcat-8.5.14/webapps/cas/WEB-INF/classes$ cp log4j2.xml log4j2.xml.bak
266+ jiangxin@ubuntu11 :/usr/local/tomcat/apache-tomcat-8.5.14/webapps/cas/WEB-INF/classes$ vim log4j2.xml
307267
308268``` xml
309269<?xml version =" 1.0" encoding =" UTF-8" ?>
0 commit comments