You can have multiple SSL certificates.  They cannot be on the same IP address 
(although you can use the same port number on different IPs).  Since the HTTP header 
is encrypted within the transmission, the requested domain name can't be determined 
until after decryption - so it wouldn't know which SSL certificate to use for 
decryption.  
 
The way I've done it:
 - Separate IP addresses for each distinct domain name/SSL cert combination
 - Define multiple Connectors for the SSL port, each with a distinct IP address AND 
distinct keystore file
 - Each keystore file has an individual SSL certificate stored in it (with key name 
'tomcat')  
 
Hope this helps.
 
Roman

        -----Original Message----- 
        From: Rich P [mailto:[EMAIL PROTECTED] 
        Sent: Tue 6/3/2003 12:04 PM 
        To: [EMAIL PROTECTED] 
        Cc: 
        Subject: Multiple SSL cert for Tomcat
        
        

        All,
        
        From reading the SSL howto, it looks like I can have
        multiple SSL cert with different passwd (if needed) in
        the same keystore file. 
        
        Situation,
        
        1 server, common web application - 2 gua with 2
        different URL's (each with their own ssl cert)
        
        Questions,
        
        1. Can I serve both sites from one port (8443)
        2. Do I need to define multiple service containers per
        URL
        
        
        TIA
        
        __________________________________
        Do you Yahoo!?
        Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
        http://calendar.yahoo.com
        

Reply via email to