override cas.example.org DNS name

[cheekian yap]

Hi,

cas version: 6.2.6

I have added the following line inside application.properties:

cas.authn.saml-idp.entity-id=https://xx.xx.xx.xx:8443/cas/idp/metadata

However, the certificate generated in /etc/cas/saml/idp-metadata.xml still shows:

X509v3 Subject Alternative Name:

                DNS:cas.example.org, URI:cas.example.org/idp/metadata

How can I override the default value?

[Andy Ng]

Hello,

The endpoint seems to use the cas.server.name properties, see: 

https://github.com/apereo/cas/blob/v6.2.6/support/cas-server-support-saml-idp-core/src/main/java/org/apereo/cas/support/saml/idp/metadata/generator/BaseSamlIdPMetadataGenerator.java#L121

Have you these cas.server.name for your CAS server? like so: https://apereo.github.io/cas/6.2.x/configuration/Configuration-Properties.html#cas-server

If no, try and see if this fix it. FYI you also need to remove the idp-metadata.xml and the cert files for it to regenerate those files.

Cheers!

- Andy

[cheekian yap]

Yes, changing cas.server.name does the trick. Thanks a lot!

Andy Ng 在 2020年12月22日 星期二下午10:29:37 [UTC+8] 的信中寫道：

[Andy Ng]

np, glad it helps - Andy