CASAuthenticationException: Unable to validate ProxyTicketValidator

Question

Dear all,
I am trying to Create CAS SSL client certificate, So i created Tomcat Server Certificate with cacert.pem ,tomcat-server.pem,tomcat-server.jks and i Imported tomcat-server certificate.
For CAS SSL client certificate, i created cas-ldap-client.pem,cas-ldap-client.der and i Imported the signed certificate
Then i have Changed at server.xml like
  <Connector port="8443" maxHttpHeaderSize="8192"
               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
               enableLookups="false" disableUploadTimeout="true"
               acceptCount="100" scheme="https" secure="true" URIEncoding="UTF-8"
               clientAuth="true" sslProtocol="TLS" keyAlias="tomcat-server"
               keystorePass="changeit" truststorePass="changeit"
               keystoreType="JKS" truststoreType="JKS"
               keystoreFile="/etc/pki/demoCA/certs/tomcat-server.jks"
               truststoreFile="/etc/pki/demoCA/certs/tomcat-server.jks"/>finally i have add one more changes at web.xml
<filter>
        <filter-name>CAS Filter</filter-name>
        <filter-class>edu.yale.its.tp.cas.client.filter.CASFilter</filter-class>
        <init-param>
            <param-name>edu.yale.its.tp.cas.client.filter.loginUrl</param-name>
            <param-value>https://auth.langhua:8443/casauth/login</param-value>
        </init-param>
        <init-param>
            <param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
            <param-value>https://auth.langhua:8443/casauth/ServiceValidate</param-value>
        </init-param>
        <init-param>
            <param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>
            <param-value>auth.langhua:8443</param-value>
        </init-param>
    </filter>
     <filter-mapping>
        <filter-name>CAS Filter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>While running my appliction it's successfully redirecting to casauth appliction, once i entered valid ldap username and password , if it's verified then its redirect to myapplication from casauth application with ticket Id But I got the exception as below:
javax.servlet.ServletException: edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to validate ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator casValidateUrl=[https://auth.langhua:8443/casauth/ServiceValidate] ticket=[ST-5-DK6OkLuh36FRbeAuVVr4] service=[https%3A%2F%2Fauth.langhua%3A8443%2FMyAPP%2FsubMenu.action] renew=false]]]
     edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:381)
root cause
edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to validate ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator casValidateUrl=[https://auth.langhua:8443/casauth/ServiceValidate] ticket=[ST-5-DK6OkLuh36FRbeAuVVr4] service=[https%3A%2F%2Fauth.langhua%3A8443%2FMyAPP%2FsubMenu.action] renew=false]]]
     edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:52)
     edu.yale.its.tp.cas.client.filter.CASFilter.getAuthenticatedUser(CASFilter.java:455)
     edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:378)
root cause
java.net.SocketException: Software caused connection abort: recv failed
     java.net.SocketInputStream.socketRead0(Native Method)
     java.net.SocketInputStream.read(Unknown Source)
     com.sun.net.ssl.internal.ssl.InputRecord.readFully(Unknown Source)
     com.sun.net.ssl.internal.ssl.InputRecord.read(Unknown Source)
     com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)
     com.sun.net.ssl.internal.ssl.SSLSocketImpl.waitForClose(Unknown Source)
     com.sun.net.ssl.internal.ssl.HandshakeOutStream.flush(Unknown Source)
     com.sun.net.ssl.internal.ssl.Handshaker.sendChangeCipherSpec(Unknown Source)
     com.sun.net.ssl.internal.ssl.ClientHandshaker.sendChangeCipherAndFinish(Unknown Source)
     com.sun.net.ssl.internal.ssl.ClientHandshaker.serverHelloDone(Unknown Source)
     com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(Unknown Source)
     com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Unknown Source)
     com.sun.net.ssl.internal.ssl.Handshaker.process_record(Unknown Source)
     com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)
     com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
     com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)
     com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)
     sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source)
     sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
     sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
     sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Unknown Source)
     edu.yale.its.tp.cas.util.SecureURL.retrieve(SecureURL.java:84)
     edu.yale.its.tp.cas.client.ServiceTicketValidator.validate(ServiceTicketValidator.java:212)
     edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:50)
     edu.yale.its.tp.cas.client.filter.CASFilter.getAuthenticatedUser(CASFilter.java:455)
     edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:378)Please suggest me a thing to recover this exception and they will be highly appreciated.
Thanks in Advance,
Satheesh Kannan A.B

Answer 1

Did you upgrade from 4.1?
When and what version license did you install?