Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: domain of uma_rk@comcast.net designates
 76.96.30.64 as permitted sender)
Date: Wed, 29 Jul 2009 22:13:23 +0000 (UTC)
From: uma_rk@comcast.net
To: Tomcat Users List <users@tomcat.apache.org>
Message-ID: 
 <1431520343.6697551248905603621.JavaMail.root@sz0016a.emeryville.ca.mail.comcast.net>
In-Reply-To: <4A70A6EF.2060001@apache.org>
Subject: Re: IP-based virtual hosting with Tomcat(6)
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_332867_726220092.1248905603620"

------=_Part_332867_726220092.1248905603620
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Mark,

If I wanted to use the same SSL certificate for all virtual hosts
does it follow that 
  a) I cannot use name based vHosts (because Tomcat SSL connector 
       uses the Host: entry in the request as the common name) and must 
       use IP-based vHosts.

  b) or define name-based vHosts on Tomcat but implement SSL termination
       ahead of Tomcat (on Apache or some such),
       rewrite the HTTP header to include the appropriate Host: entry and then
       forward the requqest to Tomcat?

Are these correct assertions?

Thanx,

/U
       
----- Original Message -----
From: Mark Thomas 
To: Tomcat Users List 
Sent: Wed, 29 Jul 2009 19:45:51 +0000 (UTC)
Subject: Re: IP-based virtual hosting with Tomcat(6)

uma_rk@comcast.net wrote:
> I am using Tomcat6.0.18 on RHEL5.
> 
> I would like to set up IP-based virtual hosting using Tomcat alone ( as opposed
> to using Apache front-end).
> 
> The documentation (http://tomcat.apache.org/tomcat-6.0-doc/virtual-hosting-howto.html)
> as well as examples of it seem to illustrate the use of name-based virtual hosting:
>    
>     
>     
>   
> 
> 
> I would like to avoid using name-based vhosts to sidestep the attendant
> SSL issues.If I want to to run virtual hosts attached to distinct network aliases (eth0.0 = 127.0.0.9,
> eth0.1 = 127.0.0.10) on the same server how do I configure the Host entries
> in the Engine? Ca nyou point me to the complete server.xml (or the Engine) configuration?

Just use ip addresses rather than DNS names for the name element of the
Host element. Of course, that assumes that your users will be connecting
using IP addresses rather than host names.

Mark


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


------=_Part_332867_726220092.1248905603620--