tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: SSL digital cert for each context?
Date Wed, 02 Nov 2016 16:50:35 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Mark,

On 11/2/16 11:59 AM, Mark Thomas wrote:
> On 02/11/2016 15:56, Andrea Galli wrote:
>> Hello guys,
>> 
>> I have configured SSL on Tomcat following this How-To: 
>> https://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Introduction_
to_SSL
>>
>>
>>
>>
>> 
Everything works fine but this certificate is applied on all Tomcat cont
ext
>> that reside on webapps folder, my aim is implement different
>> digital cert for each context:
>> 
>> 
>> 
>> https://test.myfirstdomain.com:8080   have digital certificate
>> 
>> https://test.myseconddomain.com:8081   must have different
>> digital certificate
> 
> Those are different hosts, not different contexts. Big difference.
> 
>> It is possible without install Apache?
> 
> Yes. You need at least 8.5.x for TLS virtual hosting support.

This also requires Java 8 IIRC which is the first to support SNI
(which is what is really being requested, not just "TLS virtual
hosting" which of course already works, for some definition of "works".

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=SaTc
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message