Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: domain of rthirunavukkarasu23@gmail.com
 designates 209.85.217.173 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <1335800556.85780.YahooMailNeo@web125501.mail.ne1.yahoo.com>
References: 
 <CAMSN5ZYFqZ0aF3fKSatfC3p1mfhiLBEutsJfD0n5vRFx0kZ__w@mail.gmail.com>
	<4F9E5593.8020805@apache.org>
	<CAMSN5Za4cnqw1o8vctOAgTyrd-tnYjpsG_ZxEv-f13RhV9K8OA@mail.gmail.com>
	<1335800556.85780.YahooMailNeo@web125501.mail.ne1.yahoo.com>
Date: Wed, 2 May 2012 17:46:06 +0530
Message-ID: 
 <CAMSN5ZYKV8ma1doVEyb5RzkCvWDmGaR7Q_OOYMrRqy=fwuadHQ@mail.gmail.com>
Subject: Re: SNI (Server Name Indication) supports in Tomcat (7.0.27)
From: Reka Thirunavukkarasu <rthirunavukkarasu23@gmail.com>
To: Tomcat Users List <users@tomcat.apache.org>,
 Mark Eggers <its_toasted@yahoo.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Mon, Apr 30, 2012 at 9:12 PM, Mark Eggers <its_toasted@yahoo.com> wrote:
> ----- Original Message -----
>
>> From: Reka Thirunavukkarasu <rthirunavukkarasu23@gmail.com>
>> To: Tomcat Users List <users@tomcat.apache.org>
>> Cc:
>> Sent: Monday, April 30, 2012 4:19 AM
>> Subject: Re: SNI (Server Name Indication) supports in Tomcat (7.0.27)
>>
>>T hanks. I could see all the clarifications there.
>>
>> Reka
>>
>> On Mon, Apr 30, 2012 at 2:34 PM, Mark Thomas <markt@apache.org> wrote:
>>> =C2=A0On 30/04/2012 09:58, Reka Thirunavukkarasu wrote:
>>>> =C2=A0Can you please provide any material
>>>> =C2=A0to got through to support SNI?
>>>
>>> =C2=A0http://tomcat.markmail.org/thread/q6d5czzlgih3r2ys
>>>
>>> =C2=A0Mark
>
>
> Reka,
>
> Another wrinkle, but I've not tried this with Tomcat . . .
>
> You could look at a SAN cert. I'm currently using a SAN cert in Apache HT=
TPD with named virtual hosts and SSL. The configuration check complains, bu=
t that complaint is apparently a bug since the actual feature is supported.
>
> I don't know what the performance impact would be with many hosts. I also=
 don't know how this would work since you let your users choose virtual hos=
t names. The SAN cert would have to be updated for each host name, which mi=
ght also be an issue for you.

Since we are dynamically handling the hosts, SAN is again an issue.
The eventual approach is using wild card for the host names to
overcome the issues with other approaches. Since we are using java 6,
using SNI at the moment is not much stable for us.
>
> . . . . just my two cents.
> /mde/
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>

Reka.

--=20
Regards,
Reka
:)

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org