最近這兩天在搞單點登錄，第一次使用老出狀況。以下是配置過程：

1、安全證書

　　A）、生成證書KeyStore

　　　　keytool -genkey -alias?pwd123 -keyalg RSA -keystore server.keystore

　　B）、導出證書

　　　　keytool -export -file client.crt -alias?pwd123 -keystore server.keystore

　　C）、在客戶端導入證書

　　　　keytool -import -keystore %JAVA_HOME%/jre/lib/security/cacerts -file client.crt -alias pwd123

2、配置服務器端Tomcat　　

　　1.修改server.xml

　　<Connector
?????????? port="8443" minSpareThreads="5" maxSpareThreads="75"
?????????? enableLookups="true" disableUploadTimeout="true"
?????????? acceptCount="100"? maxThreads="200"
?????????? scheme="https" secure="true" SSLEnabled="true"
?????????? keystoreFile="keystore/server.keystore" keystorePass="pwd123"
?????????? clientAuth="false" sslProtocol="TLS"/>

　　CAS (Central Authentication Service)是Yale大學的ITS開發的一套JAVA實現的開源的SSO(single sign-on)的服務。該服務是以一個java web app(eg:cas.war)來進行服務

3、客戶端添加測試應用

　　配置應用WEB.XML文件　

<!-- SSO-Start -->

???????? <filter>

?????????????????? <filter-name>CAS Filter</filter-name>

?????????????????? <filter-class>edu.yale.its.tp.cas.client.filter.CASFilter</filter-class>

?????????????????? <init-param>

??????????????????????????? <param-name>edu.yale.its.tp.cas.client.filter.loginUrl</param-name>

??????????????????????????? <param-value>https://www.jacas.com:8443/cas/login</param-value>

?????????????????? </init-param>

?????????????????? <init-param>

??????????????????????????? <param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>

??????????????????????????? <param-value>https://www.jacas.com:8443/cas/proxyValidate</param-value>

?????????????????? </init-param>

?????????????????? <init-param>

??????????????????????????? <param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>

??????????????????????????? <param-value>localhost</param-value>

?????????????????? </init-param>

???????? </filter>?

???????? <filter-mapping>

?????????????????? <filter-name>CAS Filter</filter-name>

?????????????????? <url-pattern>*.html</url-pattern>

???????? </filter-mapping>

???????? <filter-mapping>

?????????????????? <filter-name>CAS Filter</filter-name>

?????????????????? <url-pattern>*.htm</url-pattern>

???????? </filter-mapping>

???????? <filter-mapping>

?????????????????? <filter-name>CAS Filter</filter-name>

?????????????????? <url-pattern>*.action</url-pattern>

???????? </filter-mapping>????????

???????? <filter-mapping>

?????????????????? <filter-name>CAS Filter</filter-name>

?????????????????? <url-pattern>*</url-pattern>

???????? </filter-mapping>

???????? <!-- SSO-END -->

CAS Tomcat實現單點登錄