Certificate- where to install?

[webzo]

Here is the setup- 
I have server 1 with Webapp1 and CAS. 
I have server2 with Webapp2 and its web.xml pointing to CAS on server1. 
I have installed a certificate on server 1 with common name=localhost. Access to webapp 1 is protected with no problems. 
Access to webapp 2 takes me to CAS login page where I login and authentication is successful. However, during redirection to webapp2, I get the familiar Error during ProxyTicketValidation (during SSL Handshake).

Question- I think I need to install one more certificate. Where should I install it and what should be the common name? I tried installing a certificate on server2 with common
 name=localhost. That didn't help. I can see 2 other possibilities- on server 2 with CN=<name of server1> or vice-versa. I guess I haven't understood which entity is certifying what when a certificate is installed. Could someone please clarify?

Thank you.






 
____________________________________________________________________________________
Don't pick lemons.
See all the new 2007 cars at Yahoo! Autos.
http://autos.yahoo.com/new_cars.html 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20070321/941cd279/attachment.html