[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #20 from Mahesh --- Sure. I could find some ways myself. Posting them here for anyone who comes across this. There is now a solution to this starting with Tomcat v8.5.24. They introduced 2 methods named:

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #19 from Mark Thomas --- The Tomcat community does not use Bugzilla as a user support forum. Questions relating to the usage of Apache Tomcat are very unlikely to receive an answer here and should be directed to the Apache Tomcat

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #18 from Mahesh --- I guess I found the method. It's reloadSslHostConfig's 2 variants. But how do I call it ? -- You are receiving this mail because: You are the assignee for the bug.

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 Mahesh changed: What|Removed |Added CC||mahesh.ratt...@gmail.com -- You are

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #17 from Mahesh --- Hello, I was facing this exact bug and glad it is resolved. But I'm not sure how to proceed with this (really new to configuring tomcat). I've configured everything in server.xml and 2 way handshaking works.

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #16 from Mark Thomas --- Please move this to the users list. -- You are receiving this mail because: You are the assignee for the bug. - To

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #15 from Jesse --- That gives an InstanceNotFoundException, I can't find any Catalina:* objects. Even if that did return an object, could I gain direct access to the AbstractEndpoint instance that I want to

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #14 from Mark Thomas --- Catalina:type=ThreadPool,name="http-nio-8080" -- You are receiving this mail because: You are the assignee for the bug.

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #13 from Jesse --- I was able to see many tomcat mbeans using: ManagementFactory.getPlatformMBeanServer().queryNames(new ObjectName("Tomcat:*"), null) However I don't see any that look like they'd represent

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #12 from Christopher Schultz --- (In reply to Jesse from comment #11) > I'd rather not use JMX, I'm not totally familiar with JMX but wouldn't that > require me to enable JMX on a port in our

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #11 from Jesse --- I'd rather not use JMX, I'm not totally familiar with JMX but wouldn't that require me to enable JMX on a port in our application? If I can use JMX directly via the embedded tomcat without

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #10 from Mark Thomas --- Off the top of my head (I can check later if this doesn't work) you should be able to do this via JMX. -- You are receiving this mail because: You are the assignee for the bug.

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #9 from Jesse --- Hi Mark, Thanks for your work on this, I see the methods on AbstractEndpoint and I think they are exactly what I need and should allow me to remove my custom implementation. The only thing

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 Mark Thomas changed: What|Removed |Added CC||dmik...@gopivotal.com

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #6 from Mark Thomas --- This has been implemented in 9.0.x for 9.0.0.M28 onwards. I'll back-port it to 8.5.x once folks have had a chance to test it. -- You are receiving this mail because: You are the assignee

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #5 from Jesse --- We have actually implemented letsencrypt in our application. We allow users to configure new domains that our application will respond to over SSL, and we give them the option to provide

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 Ralf Hauser changed: What|Removed |Added CC||hau...@acm.org ---

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #3 from Mark Thomas --- For anyone looking at implementing this, the following thread will be useful: http://markmail.org/thread/ox3h7oaqgef3qqyk The short version is removing an SSLHostConfig for APR/native is

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #2 from Jesse --- In version 8.5.9 that we are running it looks like that method calls putIfAbsent against the sslHostConfigs map, throwing an IllegalArgumentException if there is a duplicate SSLHostConfig

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 --- Comment #1 from Christopher Schultz --- If you call org.apache.tomcat.util.net.AbstractEndpoint.addSslHostConfig(SSLHostConfig) with a hostconfig object with a hostname matching an existing hostconfig, it will

[Bug 60762] Enhancement: Add support for runtime SNI changes in tomcat-embed

https://bz.apache.org/bugzilla/show_bug.cgi?id=60762 Jesse changed: What|Removed |Added CC||je...@dreamtsoft.com --