Hmmm... The reasoning seems sound, but although I'm the cas module maintainer, another developer contributed the code for that portion of the app. Could you do me a favor and log an issue on the cas project issue queue for this one? I'll see if I can get the original code contributer to respond.
Dave
-----Original Message----- From: support-bounces@drupal.org [mailto:support-bounces@drupal.org] On Behalf Of Frank Van Damme Sent: Tuesday, September 21, 2010 1:40 AM To: support@drupal.org Subject: [support] CAS plugin: SSL error in verifying ticket
Hi list!
I'm setting up the drupal CAS plugin for the CAS authentication system. Basically the Drupal plugin checks with curl to a server running CAS to see if a ticket is valid. Which happens over ssl, and which fails. I'm using self-signed cert, which works nicely, and I have put the PEM certificate in the CAS module config box for "CAS PEM Certificate" on Drupal.
There are 3 options. * do not verify the certificate * verify the server using PEM certificate * verify the CA using PEM certificate
I use the second option and I feed Drupal the certificate that the CAS server (Tomcat app speaking https) uses. I get an error in the cas/drupal debug log:
CURL error #58: unable to set private key file: '/root/tomcat.pem'.
That's confusing because it obviously needs a *public* key file, no? -- [ Drupal support list | http://lists.drupal.org/ ]