Return-Path: <remm@apache.org>
Mailing-List: contact tomcat-dev-help@jakarta.apache.org; run by ezmlm
Delivered-To: mailing list tomcat-dev@jakarta.apache.org
Received: (qmail 92520 invoked from network); 3 Aug 2000 16:39:04 -0000
Received: from dnai-216-15-97-206.cust.dnai.com (HELO kali.betaversion.org)
 (216.15.97.206)
  by locus.apache.org with SMTP; 3 Aug 2000 16:39:04 -0000
Received: from c163581a (c163581-a.smateo1.sfba.home.com [24.12.46.10])
	by kali.betaversion.org (8.9.3+Sun/8.9.3) with SMTP id JAA16691
	for <tomcat-dev@jakarta.apache.org>; Thu, 3 Aug 2000 09:39:02 -0700 (PDT)
Message-ID: <004201bffd69$66715500$0a2e0c18@animestar.com>
From: "Remy Maucherat" <remm@apache.org>
To: <tomcat-dev@jakarta.apache.org>
References: <02ce01bffd21$81c01320$cb00000a@CREATORNET>
 <01d801bffd62$849a24a0$2403480c@raegunn>
Subject: Re: [Catalina] SSL implementation questions and comments
Date: Thu, 3 Aug 2000 09:39:31 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-Spam-Rating: locus.apache.org 1.6.2 0/1000/N

> I can only speak for Tomcat but this is defined in server.xml as the
> keystoreFile variable (I believe, its been a couple of months since I
looked
> at the code, and I haven't looked at the Catalina code that was ported by
> Remy Maucherat).

I just use the ...net.SSLSocketFactory.
The parameters of the connector should be passed to the SocketFactory, so
you should be able to set a different keystore file using :

  <Connector className="org.apache.tomcat.connector.http.HttpConnector"
             port="443" minProcessors="5" maxProcessors="75"
      acceptCount="10" debug="99"
             socketFactory="org.apache.tomcat.net.SSLSocketFactory" >
        <Parameter name="keystore"
         value="path_to_some_other_keystore"/>
  </Connector>

Other parameters which are useful for the SSL connector include :
- keystoreType
- clientauth
- keypass
- protocol
- algorithm

Remy