Re: TomCat multiple ssl support

2009-12-29 Thread Markus Schönhaber
29.12.2009 15:28, Mark Thomas: > However, there is a spec for this: RFC 4366, SNI (Server Name > Indication). It should be implementable for at least the APR/native > connector. Not sure of the extent, if any, of support in the browsers. If a recent article in the German c't magazine is right (an

Re: TomCat multiple ssl support

2009-12-29 Thread André Warnier
Peter Crowther wrote: 2009/12/29 DOrlov Hello, I have TomCat 6 server and I have 3 SSL sertificates for: 1. p.domain.com 2. p1.domain.com 3. p2.domain.com I would like to use all 3 on 1 SSL connector (Don't create 3 SSL connectors) I'm using keytool app and kestore SSL logic for TomCat SSL c

Re: TomCat multiple ssl support

2009-12-29 Thread Zacheusz Siedlecki
Exactly Thomas :) Regards, Zacheusz On Tue, Dec 29, 2009 at 3:28 PM, Mark Thomas wrote: > On 29/12/2009 14:04, Peter Crowther wrote: >> 2009/12/29 DOrlov >> >>> >>> Hello, I have TomCat 6 server and I have 3 SSL sertificates for: >>> >>> 1. p.domain.com >>> 2. p1.

Re: TomCat multiple ssl support

2009-12-29 Thread Zacheusz Siedlecki
These are three different domains. Theoretically you can choose cerfificate for subdomain. Look at: RFC 4680: TLS Handshake Message for Supplemental Data RFC 4366: Transport Layer Security (TLS) Extensions Basically, the client sends the target host during the initial handshake so you can pic

Re: TomCat multiple ssl support

2009-12-29 Thread Mark Thomas
On 29/12/2009 14:04, Peter Crowther wrote: > 2009/12/29 DOrlov > >> >> Hello, I have TomCat 6 server and I have 3 SSL sertificates for: >> >> 1. p.domain.com >> 2. p1.domain.com >> 3. p2.domain.com >> >> I would like to use all 3 on 1 SSL connector (Don't create 3 SSL >> connectors) >> I'm using

Re: TomCat multiple ssl support

2009-12-29 Thread Peter Crowther
2009/12/29 DOrlov > > Hello, I have TomCat 6 server and I have 3 SSL sertificates for: > > 1. p.domain.com > 2. p1.domain.com > 3. p2.domain.com > > I would like to use all 3 on 1 SSL connector (Don't create 3 SSL > connectors) > I'm using keytool app and kestore SSL logic for TomCat SSL configur

Re: TomCat multiple ssl support

2009-12-29 Thread Pid
On 29/12/2009 13:20, Zacheusz Siedlecki wrote: On Tue, Dec 29, 2009 at 1:56 PM, Mark Thomas wrote: On 29/12/2009 12:30, DOrlov wrote: Hello, I have TomCat 6 server and I have 3 SSL sertificates for: 1. p.domain.com 2. p1.domain.com 3. p2.domain.com I would like to use all 3 on 1 SSL connec

Re: TomCat multiple ssl support

2009-12-29 Thread Zacheusz Siedlecki
You could modify connector sources. Regards, Zacheusz On Tue, Dec 29, 2009 at 1:56 PM, Mark Thomas wrote: > On 29/12/2009 12:30, DOrlov wrote: >> >> Hello, I have TomCat 6 server and I have 3 SSL sertificates for: >> >> 1. p.domain.com >> 2. p1.domain.com >> 3. p2.do

Re: TomCat multiple ssl support

2009-12-29 Thread Mark Thomas
On 29/12/2009 12:30, DOrlov wrote: > > Hello, I have TomCat 6 server and I have 3 SSL sertificates for: > > 1. p.domain.com > 2. p1.domain.com > 3. p2.domain.com > > I would like to use all 3 on 1 SSL connector Tomcat does not support this. Mark -