You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Jan Pernica <ja...@pernica.org> on 2016/12/12 09:07:57 UTC
2 Adresses, 2 certs
Hi everybody
We need to migrate to new address. Some time we need to listen on 2
domains. Is there any way to have two certs for the same service
depending on the address?
Currently my SSL config is this:
<Service name="Catalina">
<Connector port="443" protocol="org.apache.coyote.http11.Http11AprProtocol"
SSLEnabled="true"
maxThreads="150"
scheme="https"
secure="true"
SSLVerifyClient="none"
SSLProtocol="TLSv1+TLSv1.1+TLSv1.2"
ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA,
TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,
TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_RC4_128_SHA"
useServerCipherSuitesOrder="true"
SSLCertificateFile="d:/apache-tomcat8/conf/cert/n/cert.cert"
SSLCertificateKeyFile="d:/apache-tomcat8/conf/cert/n/key.key"
SSLCACertificateFile="d:/apache-tomcat8/conf/cert/n/cacerts.pem"
SSLPassword="XXXX"
/>
<Engine name="Catalina" defaultHost="localhost">
<Host name="localhost" appBase="webapps"
unpackWARs="true" autoDeploy="true">
<Valve className="org.apache.catalina.valves.AccessLogValve"
directory="logs"
prefix="localhost_access_log" suffix=".txt"
pattern="%h %l %u %t "%r" %s %b" />
</Host>
</Engine>
</Service>
Thank you for any help
Jan Pernica
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: 2 Adresses, 2 certs
Posted by Mark Thomas <ma...@apache.org>.
On 12/12/2016 09:07, Jan Pernica wrote:
> Hi everybody
>
> We need to migrate to new address. Some time we need to listen on 2
> domains. Is there any way to have two certs for the same service
> depending on the address?
Yes, but you need up be using Tomcat 8.5.x. It has support for TLS
virtual hosting.
Mark
>
> Currently my SSL config is this:
>
> <Service name="Catalina">
>
> <Connector port="443" protocol="org.apache.coyote.http11.Http11AprProtocol"
> SSLEnabled="true"
> maxThreads="150"
> scheme="https"
> secure="true"
> SSLVerifyClient="none"
> SSLProtocol="TLSv1+TLSv1.1+TLSv1.2"
> ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA,
> TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,
> TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_RC4_128_SHA"
> useServerCipherSuitesOrder="true"
> SSLCertificateFile="d:/apache-tomcat8/conf/cert/n/cert.cert"
> SSLCertificateKeyFile="d:/apache-tomcat8/conf/cert/n/key.key"
> SSLCACertificateFile="d:/apache-tomcat8/conf/cert/n/cacerts.pem"
> SSLPassword="XXXX"
> />
> <Engine name="Catalina" defaultHost="localhost">
> <Host name="localhost" appBase="webapps"
> unpackWARs="true" autoDeploy="true">
> <Valve className="org.apache.catalina.valves.AccessLogValve"
> directory="logs"
> prefix="localhost_access_log" suffix=".txt"
> pattern="%h %l %u %t "%r" %s %b" />
>
> </Host>
> </Engine>
> </Service>
>
> Thank you for any help
>
> Jan Pernica
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org