Re: [Resin-interest] Resin Wildcard SSL Certs?

2009-06-25 Thread Jay Ballinger
We use wildcard certs with 3.0.18Pro and 3.1.6Pro (JSSE and 32bit) 
without problems.

If only we could correctly limit the cipher suites.
http://bugs.caucho.com/view.php?id=3431 (which is a reopen of)
http://bugs.caucho.com/view.php?id=2360

Scott or Emil, either of you had a chance to review my suggested 
changes, yet?

+ jay



Rob Lockstone wrote:
 Does anyone know if Resin (Pro 3.1.9 64-bit with OpenSSL) would have  
 any problems handling a wildcard ssl certificate, as opposed to a  
 domain specific cert, e.g. *.blahblah.com vs. poolOne.blahblah.com,  
 poolTwo.blahblah.com, poolThree.blahblah.com.
 
 We're considering getting one because a few of our pools require ssl  
 and it's easier to manage, though more expensive, to get just one  
 certificate for all of them rather than deal with multiple different  
 certs for the different pools (i.e. remembering to renew them and make  
 sure they're deployed, etc).
 
 We know it works with IIS, but have never tried a wildcard cert with  
 Resin and OpenSSL. I wouldn't anticipate there being a problem, but  
 obviously we'd rather not spend the money only to find out it won't  
 work for some reason. Anyone know?
 
 Rob
 
 
 
 ___
 resin-interest mailing list
 resin-interest@caucho.com
 http://maillist.caucho.com/mailman/listinfo/resin-interest


___
resin-interest mailing list
resin-interest@caucho.com
http://maillist.caucho.com/mailman/listinfo/resin-interest


[Resin-interest] Resin Wildcard SSL Certs?

2009-06-23 Thread Rob Lockstone
Does anyone know if Resin (Pro 3.1.9 64-bit with OpenSSL) would have  
any problems handling a wildcard ssl certificate, as opposed to a  
domain specific cert, e.g. *.blahblah.com vs. poolOne.blahblah.com,  
poolTwo.blahblah.com, poolThree.blahblah.com.

We're considering getting one because a few of our pools require ssl  
and it's easier to manage, though more expensive, to get just one  
certificate for all of them rather than deal with multiple different  
certs for the different pools (i.e. remembering to renew them and make  
sure they're deployed, etc).

We know it works with IIS, but have never tried a wildcard cert with  
Resin and OpenSSL. I wouldn't anticipate there being a problem, but  
obviously we'd rather not spend the money only to find out it won't  
work for some reason. Anyone know?

Rob



___
resin-interest mailing list
resin-interest@caucho.com
http://maillist.caucho.com/mailman/listinfo/resin-interest


Re: [Resin-interest] Resin Wildcard SSL Certs?

2009-06-23 Thread Erik Forkalsrud

We have used wildcard SSL certificates with resin 2.1.x using both 
OpenSSL and JSSE, and that worked fine.  I don't remember if I have 
tested it specifically for 3.1.x, but I see no reason why it wouldn't work.


- Erik -


On 06/23/2009 02:34 PM, Rob Lockstone wrote:
 Does anyone know if Resin (Pro 3.1.9 64-bit with OpenSSL) would have
 any problems handling a wildcard ssl certificate, as opposed to a
 domain specific cert, e.g. *.blahblah.com vs. poolOne.blahblah.com,
 poolTwo.blahblah.com, poolThree.blahblah.com.

 We're considering getting one because a few of our pools require ssl
 and it's easier to manage, though more expensive, to get just one
 certificate for all of them rather than deal with multiple different
 certs for the different pools (i.e. remembering to renew them and make
 sure they're deployed, etc).

 We know it works with IIS, but have never tried a wildcard cert with
 Resin and OpenSSL. I wouldn't anticipate there being a problem, but
 obviously we'd rather not spend the money only to find out it won't
 work for some reason. Anyone know?

 Rob



 ___
 resin-interest mailing list
 resin-interest@caucho.com
 http://maillist.caucho.com/mailman/listinfo/resin-interest




___
resin-interest mailing list
resin-interest@caucho.com
http://maillist.caucho.com/mailman/listinfo/resin-interest


Re: [Resin-interest] Resin Wildcard SSL Certs?

2009-06-23 Thread Rob Lockstone
Thanks, Erik.

Rob

On Jun 23, 2009, at 14:45, Erik Forkalsrud wrote:


 We have used wildcard SSL certificates with resin 2.1.x using both
 OpenSSL and JSSE, and that worked fine.  I don't remember if I have
 tested it specifically for 3.1.x, but I see no reason why it  
 wouldn't work.


 - Erik -


 On 06/23/2009 02:34 PM, Rob Lockstone wrote:
 Does anyone know if Resin (Pro 3.1.9 64-bit with OpenSSL) would have
 any problems handling a wildcard ssl certificate, as opposed to a
 domain specific cert, e.g. *.blahblah.com vs. poolOne.blahblah.com,
 poolTwo.blahblah.com, poolThree.blahblah.com.

 We're considering getting one because a few of our pools require ssl
 and it's easier to manage, though more expensive, to get just one
 certificate for all of them rather than deal with multiple different
 certs for the different pools (i.e. remembering to renew them and  
 make
 sure they're deployed, etc).

 We know it works with IIS, but have never tried a wildcard cert with
 Resin and OpenSSL. I wouldn't anticipate there being a problem, but
 obviously we'd rather not spend the money only to find out it won't
 work for some reason. Anyone know?

 Rob



___
resin-interest mailing list
resin-interest@caucho.com
http://maillist.caucho.com/mailman/listinfo/resin-interest