Re: Issue with SSL server/ network configuration

2009-03-20 Thread Gregor Schneider
Peter, On Fri, Mar 20, 2009 at 2:05 PM, i_am_superman wrote: > I just don't > understand it; how do hosting companies host 2 sites on one box with a > certificate each? That'll be a lot of IP address juggling.. > Well, we f.e. do have a box 8ok, actually two boxes behind a loadbalancer), eac

Re: Issue with SSL server/ network configuration

2009-03-20 Thread Gregor Schneider
On Fri, Mar 20, 2009 at 12:36 PM, André Warnier wrote: > > Considering the amount of taxpayer money that governments are currently > pumping into failed financial institutions and car makers, I'm sure they > could afford a 400 € certificate, no ? > Or is it that bad ? > +1 Cheers Gregor -- just

RE: Issue with SSL server/ network configuration

2009-03-20 Thread i_am_superman
P address juggling.. But let's not get carried away, this is a Tomcat mailing list :-) -- View this message in context: http://www.nabble.com/Issue-with-SSL-server--network-configuration-tp22618057p22619885.html Sent from the

RE: Issue with SSL server/ network configuration

2009-03-20 Thread Peter Crowther
> From: i_am_superman [mailto:ee...@objectivation.nl] > What are the restrictions on wildcard certificates? Some very old browsers don't understand them. Probably not a problem in your environment, but check your client's browser support requirements. > If I > have two subdomains with one wildc

RE: Issue with SSL server/ network configuration

2009-03-20 Thread Peter Crowther
> From: i_am_superman [mailto:ee...@objectivation.nl] > we have 3 environment (test, accept, prod) so we > need 3 extra certificates. No big deal indeed, but I need > to be sure that I really need them. Get a wildcard certificate? They're about 3 times the price of a regular cert, and can authen

RE: Issue with SSL server/ network configuration

2009-03-20 Thread i_am_superman
till need the two IP addresses? Or is the IP address tied to the (wildcard) certificate? Best regards, Eelco -- View this message in context: http://www.nabble.com/Issue-with-SSL-server--network-configuration-tp22618057p22619652.html Sent from the Tomcat - User mailing list arch

RE: Issue with SSL server/ network configuration

2009-03-20 Thread Darren Kukulka
Why not opt for a wildcard certificate for the domain, if that's applicable (e.g. *.yourcompany.com) -Original Message- From: i_am_superman [mailto:ee...@objectivation.nl] Sent: 20 March 2009 11:52 To: users@tomcat.apache.org Subject: Re: Issue with SSL server/ network configur

Re: Issue with SSL server/ network configuration

2009-03-20 Thread i_am_superman
icates. No big deal indeed, but I need to be sure that > I really need them. > > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > > -- View this message in

Re: Issue with SSL server/ network configuration

2009-03-20 Thread André Warnier
i_am_superman wrote: It's gonna be a public government website, so a self-signed certificate will not be an option :-) Considering the amount of taxpayer money that governments are currently pumping into failed financial institutions and car makers, I'm sure they could afford a 400 € certific

Re: Issue with SSL server/ network configuration

2009-03-20 Thread i_am_superman
e will not be an option :-) (it's tempting though) And firefox tends to be very annoying with self-signed certificates lately -- View this message in context: http://www.nabble.com/Issue-with-SSL-server--network-configuration-tp22618057p22618647.html Sent from the Tomcat -

Re: Issue with SSL server/ network configuration

2009-03-20 Thread Gregor Schneider
On Fri, Mar 20, 2009 at 12:10 PM, i_am_superman wrote: > >> If anyone else has another idea, please respond. How about a self-seigned cert? A nasty browser-window will pop up once, however, the users could import the server-cert into their browser, and then they#re done Rgds Gregor -- just be

RE: Issue with SSL server/ network configuration

2009-03-20 Thread Peter Crowther
> From: i_am_superman [mailto:ee...@objectivation.nl] > I don't think my client will allow me to run a public SSL > website any port but 443 (firewalls). Then you'll also need a second IP address on the server, as I'm sure you've already realised. - Peter ---

RE: Issue with SSL server/ network configuration

2009-03-20 Thread i_am_superman
- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > > -- View this message in context: http://www.nabble.com/Issu

RE: Issue with SSL server/ network configuration

2009-03-20 Thread Peter Crowther
> From: i_am_superman [mailto:ee...@objectivation.nl] > is there a simple way to map one > domain name to two different SSL connectors? I don't think there is, unless you want part of your application to be accessible from a different port. So the part that doesn't need certs might be at https:

Issue with SSL server/ network configuration

2009-03-20 Thread i_am_superman
SSL connectors? Port-forwarding based on web context? The latter seems possible, yet a bit flakey. Any help is greatly appreciated, Eelco -- View this message in context: http://www.nabble.com/Issue-with-SSL-server--network-configuration-tp22618057p226180