Andrew (hi namesake :)): are you sure of that?

I mean, what are you saying? That tomcat can only have 1 ssl
certificate per IP address, or that it is a "general" limitation of
the architecture of SSL certificates.

As far as i know hoy can have one ssl certificate per domain, and so
more than one ssl certificate per IP address...

In the tomcat i guess you could configure various "Service" elements,
with a different trustStoreFile for each one.

<Service name="CatalinaWithClientAuth">
    <Connector address="xxxxxxx" port="20443"
              connectionTimeout="20000" disableUploadTimeout="true"
              enableLookups="false"
              maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
              acceptCount="100" debug="0" scheme="https"
              sslProtocol="TLS" secure="true" clientAuth="true"
              truststoreFile="/home/sms/.truststore" truststorePass="xxxx"/>

Am i wrong?

On 8/25/06, Andrew Miehs <[EMAIL PROTECTED]> wrote:
You can only have 1 ssl certificate per IP address

Andrew


On 25/08/2006, at 11:09 AM, teknokrat wrote:

> I am trying to set up tomcat with multiple virtual hosts, each with
> their own SSL certificate. Is this possible? Do I add each
> certificate to the main keystore as per one host?
>


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




--

-=-=-=-=-=-=-=-=-=-=-=-=-
Andrés González.

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to