jssecacerts

[Cyril]

Well I think the CAS documentation remains correct as far as you create a blank
new keystore rather than using the default one (cacerts) provided with the J2EE
environment (which is also a possible option mentioned in the CAS documentation).

In such a case, even if you have a jssecacerts file, the one you create and
specify takes precedence. In my environment (Sun JDK 1.5.0.10 & Tomcat 5 over
Debian 4), the jssecacerts file doesn't even exist by default. I just have the
cacerts file but my own keystore takes precedence.

Anyway, with regards to the first post of this thread, I still have no
answer/solution/advice .