1. 导出证书
以上操作会在当前目录产生文件:ssodemo.crt(需要用到的文件请看CAS服务端配置那篇文章)
2. 客户端导入证书
以上操作会在jdk安装目录jre\lib\security下产生文件:cacerts
注意:多台电脑要重复以上操作,每个jdk都要导入这个文件
另一种导入证书的方法详见:http://www.cnblogs.com/cxyj/p/3884507.html
3. 添加cas客户端jar包到自己需要单点登录的web应用web-inf/lib目录下
下载地址:http://downloads.jasig.org/cas-clients/
或者maven配置:
org.jasig.cas.client cas-client-core 3.2.1
4. 配置web.xml 文件
org.jasig.cas.client.session.SingleSignOutHttpSessionListener CAS Single Sign Out Filter org.jasig.cas.client.session.SingleSignOutFilter CAS Single Sign Out Filter /* CAS Filter org.jasig.cas.client.authentication.AuthenticationFilter casServerLoginUrl https://localhost:8443/cas/login serverName http://localhost:8080 CAS Filter /* CAS Validation Filter org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter casServerUrlPrefix https://localhost:8443/cas serverName http://localhost:8080 CAS Validation Filter /* CAS HttpServletRequest Wrapper Filter org.jasig.cas.client.util.HttpServletRequestWrapperFilter CAS HttpServletRequest Wrapper Filter /* CAS Assertion Thread Local Filter org.jasig.cas.client.util.AssertionThreadLocalFilter CAS Assertion Thread Local Filter /*
以上配置中https://localhost:8443/cas 为cas服务端路径 http://localhost:8080为当前web项目的路径