SSLHandshakeException Java EE应用程序与Jasig CAS SSO一起使用Apache mod_jk和Jboss

我有Jasig CAS SSO的javaee应用程序

对于登录，我使用URL和服务：

https://myhost/cas/login?service=https://myhost/myApplication/login_callback_https.html

我们使用Apache和JBoss。 当我使用apachemod_代理时，它的工作就完成了。 当我使用mod_jk时，错误就出现了

使用

https://myhost/cas/login

成功，但 带服务<代码>https://myhost/myApplication/login_callback_https.html

这个错误出现了，我希望有人能帮助我：

    javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
    java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
    at org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:352)
    at org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer(AbstractCasProtocolUrlBasedTicketValidator.java:45)
    at org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:199)
    at org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:206)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:246)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:214)
    at org.jasig.cas.client.session.SingleSignOutFilter.doFilter(SingleSignOutFilter.java:76)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:246)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:214)
    at org.omnifaces.filter.GzipResponseFilter.doFilter(GzipResponseFilter.java:150)
    at org.omnifaces.filter.HttpFilter.doFilter(HttpFilter.java:77)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:246)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:214)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:149)
    at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:145)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:97)
    at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:559)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:102)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:336)
    at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:488)
    at org.apache.coyote.ajp.AjpProtocol$AjpConnectionHandler.process(AjpProtocol.java:420)
    at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:508)
    at org.jboss.threads.SimpleDirectExecutor.execute(SimpleDirectExecutor.java:33)
    at org.jboss.threads.QueueExecutor.runTask(QueueExecutor.java:806)
    at org.jboss.threads.QueueExecutor.access$100(QueueExecutor.java:45)
    at org.jboss.threads.QueueExecutor$Worker.run(QueueExecutor.java:826)
    at java.lang.Thread.run(Thread.java:662)
    at org.jboss.threads.JBossThread.run(JBossThread.java:122)
Caused by: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:882)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1203)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1230)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1214)
    at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434)
    at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:166)
    at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1195)
    at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234)
    at org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:337)
    ... 29 more
Caused by: java.io.EOFException: SSL peer shut down incorrectly
    at com.sun.net.ssl.internal.ssl.InputRecord.read(InputRecord.java:333)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:863)

Apache和JBoss具有相同的证书

Apache配置：
工人。属性：

worker.list=worker1, jkstatus
worker.jboss60.type=ajp13
worker.jboss60.host=localhost
worker.jboss60.port=8009
worker.jboss60.connection_pool_timeout=600
worker.jkstatus.type=status

httpd.conf:

SSLCertificateFile bin/server.crt<br>
SSLCertificateKeyFile bin/server.key<br>
...
JkMount /myApplication/* worker1<br>
JkMount /cas/* worker1<br>

<socket-binding-group name="standard-sockets" default-interface="any" port-offset="${jboss.socket.binding.port-offset:0}">
        <socket-binding name="management-http" interface="any" port="${jboss.management.http.port:9990}"/>
        <socket-binding name="management-https" interface="any" port="${jboss.management.https.port:9443}"/>
        <socket-binding name="ajp" port="8009"/>
        <socket-binding name="http" port="8080"/>
        <socket-binding name="https" port="8443"/>
    </socket-binding-group>

...
<connector name="ajp" protocol="AJP/1.3" scheme="http" socket-binding="ajp" executor="ajp-executor"/>

SSLCertificateFile bin/server.crt

SSLCertificateKeyFile bin/server.key

...
JkMount/myApplication/*worker1

JkMount/cas/*worker1

独立.xml中的JBoss配置

SSLCertificateFile bin/server.crt<br>
SSLCertificateKeyFile bin/server.key<br>
...
JkMount /myApplication/* worker1<br>
JkMount /cas/* worker1<br>

<socket-binding-group name="standard-sockets" default-interface="any" port-offset="${jboss.socket.binding.port-offset:0}">
        <socket-binding name="management-http" interface="any" port="${jboss.management.http.port:9990}"/>
        <socket-binding name="management-https" interface="any" port="${jboss.management.https.port:9443}"/>
        <socket-binding name="ajp" port="8009"/>
        <socket-binding name="http" port="8080"/>
        <socket-binding name="https" port="8443"/>
    </socket-binding-group>

...
<connector name="ajp" protocol="AJP/1.3" scheme="http" socket-binding="ajp" executor="ajp-executor"/>

...

让我们了解您的操作系统，并发布mod_jk.log以检查路由原因。如果您发布mod_jk.conf文件以及票证验证器配置错误，请检查您的筛选器配置、url和端口。让我们了解您的操作系统，并发布mod_jk.log以检查路由原因。如果您发布您的mod_jk.conf文件以及票证验证器配置错误，请检查您的过滤器配置、url和端口，这样会更好。