Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
For a limited time, we have to serve the same Tomcat 6 web application from two different domain names. Both domains need to be served HTTPS – is it technically possible to handle serving different certs for the same app using connectors (or other method)?
The other option (which we are trying to avoid) is to handle the cert delivery upstream of the application.
TIA,
Geoff
There are 3 ways to do this,
Get 2 IPs for the same host and set up 2 connectors bound to each IP. This is cleanest solution.
Get a cert with SAN (Subject Alternative Name). This is basically a cert with 2 hostnames. Some real old browser and Java 1.5 earlier doesn’t support SAN.
Another way to use 2 certs on the same IP is to use SNI (Server Name Indication) extension of TLS. Unfortunately, this is not supported by JSSE. If you can run an Apache httpd in front of the Tomcat, you can use this feature.