2009/12/29 DOrlov <dor...@redaril.com>

>
> Hello, I have TomCat 6 server and I have 3 SSL sertificates for:
>
> 1. p.domain.com
> 2. p1.domain.com
> 3. p2.domain.com
>
> I would like to use all 3 on 1 SSL connector (Don't create 3 SSL
> connectors)
> I'm using keytool app and kestore SSL logic for TomCat SSL configuration.
>
> As far as I know, the HTTP spec doesn't allow this.  The certificate must
be chosen and sent by the server to encrypt the connection before the host
header is sent by the browser over the encrypted connection.  Therefore, the
server cannot choose the certificate to send.  You'll need different
connectors, either on different IP addresses or different ports.

Happy to be corrected if someone knows better!

- Peter

Reply via email to