Return-Path: 
 <users-return-150243-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org>
Delivered-To: apmail-tomcat-users-archive@www.apache.org
Received: (qmail 1743 invoked from network); 25 Aug 2006 10:16:42 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur.apache.org with SMTP; 25 Aug 2006 10:16:42 -0000
Received: (qmail 89241 invoked by uid 500); 25 Aug 2006 10:16:27 -0000
Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org
Received: (qmail 89214 invoked by uid 500); 25 Aug 2006 10:16:26 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 89203 invoked by uid 99); 25 Aug 2006 10:16:26 -0000
Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 25 Aug 2006 03:16:26 -0700
X-ASF-Spam-Status: No, hits=0.5 required=10.0
	tests=DNS_FROM_RFC_ABUSE,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (asf.osuosl.org: domain of angoro@gmail.com designates
 66.249.92.173 as permitted sender)
Received: from [66.249.92.173] (HELO ug-out-1314.google.com) (66.249.92.173)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 25 Aug 2006 03:16:25 -0700
Received: by ug-out-1314.google.com with SMTP id u40so833019ugc
        for <users@tomcat.apache.org>; Fri, 25 Aug 2006 03:16:04 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=JxOxTl3PyU0MvtaVlw/213x7GmneXe6hR2cwCe9yIIDCN2dwGPerhOIYNkksMNXmpTnOElI+g9NWPXGj4sYBzujDh42gENviaK/JXWl72Kn1S+XNLuUi9ax7ZTojlhyFUgoK8VEeybw8gXI8sttl9WbNq8IGFFqw8aqTtDMq6qo=
Received: by 10.66.242.20 with SMTP id p20mr1732345ugh;
        Fri, 25 Aug 2006 03:16:04 -0700 (PDT)
Received: by 10.67.91.5 with HTTP; Fri, 25 Aug 2006 03:16:04 -0700 (PDT)
Message-ID: <15147e430608250316oaa29f1ax624b119cf26b50b8@mail.gmail.com>
Date: Fri, 25 Aug 2006 12:16:04 +0200
From: "=?ISO-8859-1?Q?Andr=E9s_Gonz=E1lez?=" <angoro@gmail.com>
To: "Tomcat Users List" <users@tomcat.apache.org>
Subject: Re: multiple virtual hosts and ssl certificates
In-Reply-To: <9A3590DE-1D51-447C-9A81-39796DCBB6C6@2sheds.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <ecmeo2$aps$1@sea.gmane.org>
	 <9A3590DE-1D51-447C-9A81-39796DCBB6C6@2sheds.de>
X-Virus-Checked: Checked by ClamAV on apache.org
X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N

Andrew (hi namesake :)): are you sure of that?

I mean, what are you saying? That tomcat can only have 1 ssl
certificate per IP address, or that it is a "general" limitation of
the architecture of SSL certificates.

As far as i know hoy can have one ssl certificate per domain, and so
more than one ssl certificate per IP address...

In the tomcat i guess you could configure various "Service" elements,
with a different trustStoreFile for each one.

<Service name=3D"CatalinaWithClientAuth">
     <Connector address=3D"xxxxxxx" port=3D"20443"
               connectionTimeout=3D"20000" disableUploadTimeout=3D"true"
               enableLookups=3D"false"
               maxThreads=3D"150" minSpareThreads=3D"25" maxSpareThreads=3D=
"75"
               acceptCount=3D"100" debug=3D"0" scheme=3D"https"
               sslProtocol=3D"TLS" secure=3D"true" clientAuth=3D"true"
               truststoreFile=3D"/home/sms/.truststore" truststorePass=3D"x=
xxx"/>

Am i wrong?

On 8/25/06, Andrew Miehs <andrew@2sheds.de> wrote:
> You can only have 1 ssl certificate per IP address
>
> Andrew
>
>
> On 25/08/2006, at 11:09 AM, teknokrat wrote:
>
> > I am trying to set up tomcat with multiple virtual hosts, each with
> > their own SSL certificate. Is this possible? Do I add each
> > certificate to the main keystore as per one host?
> >
>
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>


--=20

-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-
Andr=E9s Gonz=E1lez.

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org