[support] CAS plugin: SSL error in verifying ticket

[Metzler, David]

Hmmm... The reasoning seems sound, but although I'm the cas module
maintainer, another developer contributed the code for that portion of
the app.  Could you do me a favor and log an issue on the cas project
issue queue for this one?  I'll see if I can get the original code
contributer to respond. 

Dave 

-----Original Message-----
From: support-bounces at drupal.org [mailto:support-bounces at drupal.org] On
Behalf Of Frank Van Damme
Sent: Tuesday, September 21, 2010 1:40 AM
To: support at drupal.org
Subject: [support] CAS plugin: SSL error in verifying ticket

Hi list!

I'm setting up the drupal CAS plugin for the CAS authentication system.
Basically the Drupal plugin checks with curl to a server running CAS to
see if a ticket is valid. Which happens over ssl, and which fails. I'm
using self-signed cert, which works nicely, and I have put the PEM
certificate in the CAS module config box for "CAS PEM Certificate" on
Drupal.

There are 3 options.
* do not verify the certificate
* verify the server using PEM certificate
* verify the CA using PEM certificate

I use the second option and I feed Drupal the certificate that the CAS
server (Tomcat app speaking https) uses. I get an error in the
cas/drupal debug log:

CURL error #58: unable to set private key file: '/root/tomcat.pem'.

That's confusing because it obviously needs a *public* key file, no?
--
[ Drupal support list | http://lists.drupal.org/ ]