https://bz.apache.org/bugzilla/show_bug.cgi?id=57108

--- Comment #7 from Unlogic <unlo...@unlogic.se> ---
I think that sounds like a very good approach which would be easy to add to
existing server configurations.

Since a single certificate can contain multiple subject alternative names
(http://en.wikipedia.org/wiki/SubjectAltName) which may be very different from
each other I would propose to use an approach similar to the way aliases are
added to hosts.

   <Connector ...
      truststoreFile="..." (and other truststore attributes)
      keystoreFile="..." (and other keystore attributes)
      >
     <TLSAlias hostname="alternate.hostname"
         truststoreFile="..." (and other truststore attributes)
         keystoreFile="..." (and other keystore attributes)
         [other allowed configuration attributes]>

         <Alias>somehost.com</Alias>
         <Alias>anotherhost.com</Alias>
         <Alias>averydifferenthost.org</Alias>
    </TLSAlias>


     <TLSAlias hostname="alternate.hostname"
         truststoreFile="..." (and other truststore attributes)
         keystoreFile="..." (and other keystore attributes)
         [other allowed configuration attributes]
         />
   </Connector

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to