Shibboleth + CAS 3.5.2 error

[Gianluigi Ruggeri]

Hi all,

I have a question about Shibboleth + CAS 3.5.2
I followed this tutoria to configure my Shibboleth Idp.
https://wiki.jasig.org/display/CASUM/Shibboleth-CAS+Integration

I can try the Idp using TestShib:

I set my idp url ad I have a redirect to my CAS Server login Page.
I put my credentials: I'm authenticated but I'm redirected to error
page and I have this log error:

15:57:00.158 - ERROR [org.jasig.cas.client.util.CommonUtils:340] -
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to$
javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path$
        at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174)
~[na:1.6]
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1649)
~[na:1.6]
        at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:241)
~[na:1.6]
        at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:235)
~[na:1.6]
        at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1206)
~[na:1.6]
        at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:136)
~[na:1.6]
        at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:593)
~[na:1.6]
        at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:529)
~[na:1.6]
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:893)
~[na:1.6]
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1138)
~[na:1.6]
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1165)
~[na:1.6]
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1149)
~[na:1.6]
        at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434)
~[na:1.6]
        at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:166)
~[na:1.6]
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1172)
~[na:1.6.0_24]
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234)
~[na:1.6]
        at org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:326)
[cas-client-core-3.2.0.jar:3.2.0]
        at org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:305)
[cas-client-core-3.2.0.jar:3.2.0]
        at org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer(AbstractCasProtocolUrlBasedTicketValidator.java:50)
[cas-client-core-3.2.0.jar:3.2.0]
        at org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:207)
[cas-client-core-3.2.0.jar:3.2.0]
        at org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:165)
[cas-client-core-3.2.0.jar:3.2.0]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
[catalina.jar:7.0.47]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
[catalina.jar:7.0.47]
        at org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(AuthenticationFilter.java:116)
[cas-client-core-3.2.0.jar:3.2.0]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
[catalina.jar:7.0.47]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
[catalina.jar:7.0.47]
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
[catalina.jar:7.0.47]
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
[catalina.jar:7.0.47]
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:502)
[catalina.jar:7.0.47]
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
[catalina.jar:7.0.47]
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:100)
[catalina.jar:7.0.47]
        at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:953)
[catalina.jar:7.0.47]
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
[catalina.jar:7.0.47]
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408)
[catalina.jar:7.0.47]
        at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:200)
[tomcat-coyote.jar:7.0.47]
        at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:603)
[tomcat-coyote.jar:7.0.47]
        at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:310)
[tomcat-coyote.jar:7.0.47]
        at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
[na:1.6.0_24]
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
[na:1.6.0_24]
        at java.lang.Thread.run(Thread.java:662) [na:1.6.0_24]
Caused by: sun.security.validator.ValidatorException: PKIX path
building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
        at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:323)
~[na:1.6.0_24]
        at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:217)
~[na:1.6.0_24]
        at sun.security.validator.Validator.validate(Validator.java:218)
~[na:1.6.0_24]
        at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:126)
~[na:1.6]
        at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:209)
~[na:1.6]
        at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:249)
~[na:1.6]
        at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1185)
~[na:1.6]
        ... 35 common frames omitted
Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target
        at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:174)
~[na:1.6.0_24]
        at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:238)
~[na:1.6.0_24]
        at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:318)
~[na:1.6.0_24]
        ... 41 common frames omitted


Any suggestions?