Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: domain of lists@nabble.com designates
 216.139.236.158 as permitted sender)
Message-ID: <22618057.post@talk.nabble.com>
Date: Fri, 20 Mar 2009 03:52:11 -0700 (PDT)
From: i_am_superman <eelco@OBJECTIVATION.NL>
To: users@tomcat.apache.org
Subject: Issue with SSL server/ network configuration
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit


Hi y'all,

I have a fairly complex issue regarding Tomcat server configuration, so I'll
try to explain:

I have two web applications that need to run in one Tomcat server. 
Application 1 needs client certificates, so I need to configure an SSL
connector with 'clientAuth="yes"'
Application 2 needs NO client certificates, and users should not be bothered
with questions about client certificates; so I can not use
'clientAuth="want"', I have to use 'clientAuth="no"' here.

Now the easiest thing to do (I think) is to have two keystores, two server
certificates, two domain names; one for each application.

Now the problem is right now: I only have one keystore, domain name,
certificate (certificates cost money you know...). 

My question to you peoples: is there a simple way to map one domain name to
two different SSL connectors? Port-forwarding based on web context? The
latter seems possible, yet a bit flakey.

Any help is greatly appreciated,
Eelco

-- 
View this message in context: http://www.nabble.com/Issue-with-SSL-server--network-configuration-tp22618057p22618057.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org