Yale CAS 证书以及Tomcat下配置
cas server端：
keytool -genkey -alias tomcat -keyalg RSA //默认生成.keystore
keytool -export -file server.crt -alias tomcat //生成证书server.crt
cas client端：//导入证书server.crt到JVM客户端
keytool -import -keystore $JAVA_HOME\jre\lib\security\cacerts -file server.crt -alias tomcat
服务器端：
keytool -genkey -alias tomcat -keyalg RSA -keypass changeit -storepass changeit -keystore server.keystore -validity 3600 //CN（用户名）输入机器名或域名
keytool -export -trustcacerts -alias tomcat -file server.cer -keystore server.keystore -storepass changeit
server.xml:
<Connector port="8443" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="F:\server.keystore"
keystorePass="changeit" />
客户端：//将证书导入客户端的JRE里ca证书
keytool -import -trustcacerts -alias tomcat -file server.cer -keystore $JAVA_HOME/jre/lib/security/cacerts -storepass changeit
客户端web.xml
<filter-name>CAS Filter</filter-name>
<filter-class>edu.yale.its.tp.cas.client.filter.CASFilter</filter-class>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.loginUrl</param-name>
<param-value>https://dell:8443/cas/login</param-value><!--可以是ip地址-->
</init-param>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
<param-value>https://dell:8443/cas/serviceValidate</param-value><!--cas服务器端，必须是机器名或域名-->
</init-param>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>
<param-value>10.200.26.65:8080</param-value><!--cas客户端-->
</init-param>
</filter>