CAS单点登录https协议修改成http协议

来源：互联网发布：战地3正在同步云数据编辑：程序博客网时间：2024/05/18 02:24

最近在研究CAS单点登录，因为https被浏览器的不信任问题，影响登录。故将https协议修改成http协议。现将修改步骤记录如下：

CAS服务端修改:

1、修改 cas\WEB-INF\spring-configuration目录下的ticketGrantingTicketCookieGenerator.xml

<bean id="ticketGrantingTicketCookieGenerator" class="org.jasig.cas.web.support.CookieRetrievingCookieGenerator"p:cookieSecure="true"p:cookieMaxAge="-1"p:cookieName="CASTGC"p:cookiePath="/cas" />

把cookieSecure属性修改为false。（默认true是用的http是协议）。

2、修改deployerConfigContext.xml

<bean class="org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler"p:httpClient-ref="httpClient" />

添加p:requireSecure="false" 属性。

3、修改部署CAS服务端的tomcat容器的server.xml
注释掉配置https协议添加的如下代码：

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"               maxThreads="150" scheme="https" secure="true"               clientAuth="false" sslProtocol="TLS"   keystoreFile="D:/keys/smallkey"   keystorePass="111111"/>

CAS客服端修改

下载casclient的源码cas-client-3.1.6-SRC.zip，解压。

1、修改edu.yale.its.tp.cas.client.filter.edu.yale.its.tp.cas.client.filter 包下的CASFilter.java

if (casServiceUrl != null){            if (! (casServiceUrl.startsWith("https://")|| (casServiceUrl.startsWith("http://") ))){                throw new ServletException("service URL must start with http:// or https://; its current value is [" + casServiceUrl + "]");            }

if (! casValidate.startsWith("https://")){            throw new ServletException("validateUrl must start with https://, its current value is [" + casValidate + "]");

注释掉以上两段代码。

2、修改edu.yale.its.tp.cas.util包下的SecureURL.java

if (!u.getProtocol().equals("https")){            // IOException may not be the best exception we could throw here            // since the problem is with the URL argument we were passed, not            // IO. -awp9            log.error("retrieve(" + url + ") on an illegal URL since protocol was not https.");throw new IOException("only 'https' URLs are valid for this method");            }

注释以上一段代码。

重新编译以上两个类为.class文件，打包 casclient的源码为.jar。替换掉客服端的casclient.jar

3、修改客服端项目的web.xml中的casServerLoginUrl属性为http://xxx:xx/cas/login

重启服务，大功告成！