You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Suneel Saguturu <ss...@ipass.com> on 2008/11/20 08:34:50 UTC

How to add multiple SSL Certificates to Tomcat Server

All-

 

                I am facing one problem, i.e. I have to configure two
SSL certificates to JBoss server, I know they are internally using
Tomcat for web container.

 

                Is it possible to add multiple Certificates to one
server instance itself? If so, then how?

 

                Please help on this... any help is appreciated.

 

                Thanks in advance...

 

Thanks & Regards,

- Suneel Saguturu.

RE: How to add multiple SSL Certificates to Tomcat Server

Posted by Suneel Saguturu <ss...@ipass.com>.
Hi,

 

      Thanks for replying fast....

 

      I already installed but I want to validate the user requests based on URL (domain name)...

 

      I have 2 certificates installed & I am able to use only one of them, let's say 1. Myhome.com 2. Myoffice.com.

 

      If any request comes to myhome.com then I want to throw myhome.com related certificate otherwise myoffice.com related certificate.

 

      I was able to achieve the same thing with multiple virtual IP’s, but my admin wants by domain name.

 

      Hope I am able to explain my problem… 



Thanks & Regards,

- Suneel Saguturu.

 

-----Original Message-----
From: Sameek Bhaumik [mailto:sameekbhaumik@yahoo.co.in] 
Sent: Thursday, November 20, 2008 2:53 PM
To: Tomcat Users List
Subject: Re: How to add multiple SSL Certificates to Tomcat Server

 

Hi,

 

Are you talking about importing multiple certificates in tomcat keystore? If yes, you can use keytool.exe to import certificates inside tomcat keystore. The sample is given below:

 

keytool -genkey -v -alias cert1 -import -v -file C:/cert/cert1.cer -keystore C:/cert/tomcat.keystore -storepass password 

 

The pre-requisite is that the keystore file(tomcat.keystore in this case) should be present and "password" is tomcat keystore password. Here, we're importing 'cert1.cer' in tomcat keystore using the alias "cert1". You can import another certificate, say 'cert2.cer' by specifying another alias, say "cert2" in the above command. 

 

Hope that helps!!

 

Regards,

Sameek Bhaumik

 

 

 

________________________________

From: Suneel Saguturu <ss...@ipass.com>

To: users@tomcat.apache.org

Sent: Thursday, 20 November, 2008 1:04:50 PM

Subject: How to add multiple SSL Certificates to Tomcat Server

 

All-

 

 

 

                I am facing one problem, i.e. I have to configure two

SSL certificates to JBoss server, I know they are internally using

Tomcat for web container.

 

 

 

                Is it possible to add multiple Certificates to one

server instance itself? If so, then how?

 

 

 

                Please help on this... any help is appreciated.

 

 

 

                Thanks in advance...

 

 

 

Thanks & Regards,

 

- Suneel Saguturu.

 

 

      Add more friends to your messenger and enjoy! Go to http://messenger.yahoo.com/invite/

Re: How to add multiple SSL Certificates to Tomcat Server

Posted by Sameek Bhaumik <sa...@yahoo.co.in>.
Hi,

Are you talking about importing multiple certificates in tomcat keystore? If yes, you can use keytool.exe to import certificates inside tomcat keystore. The sample is given below:

keytool -genkey -v -alias cert1 -import -v -file C:/cert/cert1.cer -keystore C:/cert/tomcat.keystore -storepass password 

The pre-requisite is that the keystore file(tomcat.keystore in this case) should be present and "password" is tomcat keystore password. Here, we're importing 'cert1.cer' in tomcat keystore using the alias "cert1". You can import another certificate, say 'cert2.cer' by specifying another alias, say "cert2" in the above command. 

Hope that helps!!

Regards,
Sameek Bhaumik



________________________________
From: Suneel Saguturu <ss...@ipass.com>
To: users@tomcat.apache.org
Sent: Thursday, 20 November, 2008 1:04:50 PM
Subject: How to add multiple SSL Certificates to Tomcat Server

All-



                I am facing one problem, i.e. I have to configure two
SSL certificates to JBoss server, I know they are internally using
Tomcat for web container.



                Is it possible to add multiple Certificates to one
server instance itself? If so, then how?



                Please help on this... any help is appreciated.



                Thanks in advance...



Thanks & Regards,

- Suneel Saguturu.


      Add more friends to your messenger and enjoy! Go to http://messenger.yahoo.com/invite/

Re: How to add multiple SSL Certificates to Tomcat Server

Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Suneel,

Suneel Saguturu wrote:
> I am facing one problem, i.e. I have to configure two
> SSL certificates to JBoss server, I know they are internally using
> Tomcat for web container.
> 
> Is it possible to add multiple Certificates to one
> server instance itself? If so, then how?

You need two different <Host> elements in server.xml, each binding to a
separate IP address. That also means that your machine needs to have two
IP addresses configured. The SSL handshake occurs before the HTTP
headers are sent, so you can't switch SSL certificates based upon the
hostname the client is using to connect (because it hasn't been sent yet).

Note that this is not a problem with Tomcat: this is a universal issue
with all web servers.

- -chris

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkklk2AACgkQ9CaO5/Lv0PDgiQCfU1/cGXdUxRFVnxZsffOAcFau
ddEAmwWmn4OoQkBogH1aRSnEKPMHZd8r
=C/BF
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org