Mickaël, Could this be related to self signed certificates? You may have to install the certificate in the java keystore, https://www.digitalocean.com/community/tutorials/java-keytool-essentials-working-with-java-keystores
Java will reject unknown certificates, before they get to your app or tomcat, and there is often no indication. Ray On Thu, 2019-12-19 at 08:20 -0800, Mickaël wrote: Hello, I have follow this : https://apereo.github.io/2018/01/05/cas-deployment-with-proxy/ server.port=8080 server.ssl.enabled=false cas.server.http.enabled=false cas.server.httpProxy.enabled=true cas.server.httpProxy.secure=true cas.server.httpProxy.scheme=https cas.server.httpProxy.protocol=HTTP/1.1 Somebody has a great idea for me please ? :o) Mickaël Le mardi 17 décembre 2019 20:20:56 UTC+1, Mickaël a écrit : Ray, I already tried this but it doesn't solve the problem, I have the same error. Mickaël Le mar. 17 déc. 2019 à 18:59, Ray Bon <[email protected]<mailto:[email protected]>> a écrit : There is an answer here, https://serverfault.com/questions/655362/mod-proxy-ajp-70007the-timeout-specified-has-expired-ajp-ilink-receive-can It does not look like we have setting, but it may help. Ray On Mon, 2019-12-16 at 23:31 -0800, Mickaël wrote: Ray, Thanks for answer. The Apache error : [Mon Dec 16 20:10:23.636950 2019] [proxy_ajp:error] [pid 24997:tid 139694717187840] (70007)The timeout specified has expired: AH01030: ajp_ilink_receive() can't receive header [Mon Dec 16 20:10:23.637062 2019] [proxy_ajp:error] [pid 24997:tid 139694717187840] [client XXX.XXX.XXX.XXX:38794] AH00992: ajp_read_header: ajp_ilink_receive failed, referer: XXXXXXXX [Mon Dec 16 20:10:23.637092 2019] [proxy_ajp:error] [pid 24997:tid 139694717187840] (70007)The timeout specified has expired: [client XXX.XXX.XXX.XXX:38794] AH00878: read response failed from 127.0.0.1:8009<http://127.0.0.1:8009> (127.0.0.1), referer:XXXXXXX Le lundi 16 décembre 2019 19:17:45 UTC+1, rbon a écrit : Mickaël, What is the AJP error? You may have to turn up logging in apache and tomcat. Ray On Mon, 2019-12-16 at 10:08 -0800, Mickaël wrote: Hi, I am running CAS 5.3.X on a Tomcat 8 with Apache in frontal and AJP. since several weeks, I have AJP timeout in error.log without any more raison. My idea is to use Apache in proxy HTTP and not AJP. Apache have certificate for the TLS connection. But I am trying different configuration without success and the yellow box with the advertising about the none secure protocole does not want to disappear. If somebody have any idea. Sincerely, Mickaël -- Ray Bon Programmer Analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected] I respectfully acknowledge that my place of work is located within the ancestral, traditional and unceded territory of the Songhees, Esquimalt and WSÁNEĆ Nations. -- Ray Bon Programmer Analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected]<mailto:[email protected]> I respectfully acknowledge that my place of work is located within the ancestral, traditional and unceded territory of the Songhees, Esquimalt and WSÁNEĆ Nations. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/3ef701b840d898862ce7ad5bce4e51abfe3f1094.camel%40uvic.ca<https://groups.google.com/a/apereo.org/d/msgid/cas-user/3ef701b840d898862ce7ad5bce4e51abfe3f1094.camel%40uvic.ca?utm_medium=email&utm_source=footer>. -- Ray Bon Programmer Analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected]<mailto:[email protected]> I respectfully acknowledge that my place of work is located within the ancestral, traditional and unceded territory of the Songhees, Esquimalt and WSÁNEĆ Nations. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/8079950ebc3f709ccf6cfbed7de1166724858522.camel%40uvic.ca.
