cas-server可能與具體的welogic版本兼容，會導致啓動錯誤，經測試，以下是匹配的版本號
cas-server-3.3.5.1 --> weblogic 10.3.2
cas-server-3.5 --> weblogic 10.3.5
1.產生根證書
#創建根證書私鑰
E:\OpenSSL-Win32\bin>openssl genrsa -out D:\oracle\Middleware\ca\caRootKey.pem 512
#創建根證書請求
openssl req -new -out D:\oracle\Middleware\ca\caRootReq.csr -key D:\oracle\Middleware\ca\caRootKey.pem
password:changeit
-----
Country Name (2 letter code) [AU]:CN
State or Province Name (full name) [Some-State]:Peking
Locality Name (eg, city) []:Peking
Organization Name (eg, company) [Internet Widgits Pty Ltd]:pactera
Organizational Unit Name (eg, section) []:crm
Common Name (e.g. server FQDN or YOUR name) []:oberon
Email Address []:[email protected]
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:changeit
An optional company name []:vanceinfo
#自簽署根證書
openssl x509 -req -in D:\oracle\Middleware\ca\caRootReq.csr -out D:\oracle\Middleware\ca\caRootCert.pem -signkey D:\oracle\Middleware\ca\caRootKey.pem -days 3650
#根證書導出爲瀏覽器支持的.p12根式
openssl pkcs12 -export -clcerts -in D:\oracle\Middleware\ca\caRootCert.pem -inkey D:\oracle\Middleware\ca\caRootKey.pem -out D:\oracle\Middleware\ca\caRootCert.p12
export password:123456
#根證書導入到JDK的trustStore中
--JRE/bin目錄下
./keytool -import -v -trustcacerts -storepass changeit -alias caRootCert -file /home/weblogic/Oracle/Middleware/ca/caRootCert.pem -keystore /home/weblogic/Oracle/Middleware/jdk160_14_R27.6.5-32/jre/lib/security/cacerts
2.爲服務器產生證書
#生成服務器密匙庫cas_server.jks和服務器證書私匙：
一定要注意這裏輸入的各種值要和上面的對應 否則後面匹配不上
cd D:\oracle\Middleware
./keytool -genkey -alias cas_server_cert -validity 3650 -keyalg RSA -keysize 512 -keystore /home/weblogic/Oracle/Middleware/server/cas_server_cert.jks
keystore密碼：123456
cas_server主密碼：123456
#查看:
./keytool -list -keystore /home/weblogic/Oracle/Middleware/server/cas_server_cert.jks -storepass 123456
#生成服務器證書請求server.csr：
./keytool -certreq -alias cas_server_cert -file /home/weblogic/Oracle/Middleware/server/cas_server_req.csr -keypass 123456 -keystore /home/weblogic/Oracle/Middleware/server/cas_server_cert.jks -storepass 123456
#生成簽名後的服務器證書
openssl x509 -req -in D:\oracle\Middleware\server\cas_server_req.csr -out D:\oracle\Middleware\server\cas_server_cert.pem -CA D:\oracle\Middleware\ca\caRootCert.pem -CAkey D:\oracle\Middleware\ca\caRootKey.pem -days 3650
#將根證書導入密匙庫：
./keytool -import -v -trustcacerts -storepass 123456 -alias caRootCert -file /home/weblogic/Oracle/Middleware/ca/caRootCert.pem -keystore /home/weblogic/Oracle/Middleware/server/cas_server_cert.jks
#將服務器證書導入密匙庫：
./keytool -import -v -alias cas_server_cert -file /home/weblogic/Oracle/Middleware/server/cas_server_cert.pem -storepass 123456 -keystore /home/weblogic/Oracle/Middleware/server/cas_server_cert.jks
./keytool -printcert -file /home/weblogic/Oracle/Middleware/server/cas_server_cert.pem
3.部署cas server到weblogic，然後重啓weblogic domain，訪問CAS服務器正常。
4.CAS Server所在服務器的hosts加上對oberon的解析，如是www域名則不需要
5.CAS client應用中，web.xml必須加上對/WEB-INF/classes/spring-appContext-proxy.xml的配置：
contextConfigLocation
/WEB-INF/classes/spring-appContext.xml,
/WEB-INF/classes/spring-appContext-proxy.xml
6.CAS client應用中的spring-appContext-proxy.xml，spring-appContext.xml,ticket.xml中，
所有https打頭的，必須修改爲以服務器證書中的CN名（如oberon），並修改所有文件中的http訪問端口，
https訪問端口。
7.通過前面證書產生時生成的主機名:oberon來訪問
https://oberon:7999/cas
用admin/admin登錄，成功