can you share with apache side code. which service have you used and also 
how to create 
*cas.domain.com.**keystore* because I am also facing same error.

Thank you.

On Tuesday, September 25, 2018 at 4:57:16 PM UTC+5:30, Fahmi L. Ramdhani 
wrote:
>
> Hi all, It is resolved.
>
> casuser# mkdir /opt/tomcat/keystore
> casuser# openssl pkcs12 -export -in /etc/letsencrypt/live/
> cas.domain.com/fullchain.pem -inkey /etc/letsencrypt/live/
> cas.domain.com/privkey.pem -out /opt/tomcat/keystore/cas.domain.com.p12 
> -password pass:changeit
> casuser# keytool -importkeystore -srckeystore 
> /opt/tomcat/keystore/cas.sentrasoft.com.p12 -srcstoretype pkcs12 
> -srcstorepass changeit -destkeystore 
> /opt/tomcat/keystore/cas.sentrasoft.com.keystore -deststoretype jks 
> -deststorepass changeit
>
>
> *In /opt/tomcat/conf/server.xml *use this:
> <Connector
>  protocol="org.apache.coyote.http11.Http11NioProtocol"
>  port="8443" maxThreads="150"
>  scheme="https" secure="true" SSLEnabled="true"
>  keystoreFile="/opt/tomcat/keystore/cas.domain.com.keystore" keystorePass=
> "changeit"
>  clientAuth="false" sslProtocol="TLS" />
>
> Thank you all.
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/2235817f-5b6b-4f16-9ae8-e1e16c1891cb%40apereo.org.

Reply via email to