Hi,

Just some guesses.
You can try to configure two HttpConnectors with SSL support, 
each with own address and Factory:
Hmm, I expected alias param in Factory. So you need two keystores.

    <Connector className="org.apache.catalina.connector.http.HttpConnector"
               address="first_address" port="8443" minProcessors="5" maxProcessors="75"
               enableLookups="false" acceptCount="10" debug="0" scheme="https" 
secure="true">
      <Factory className="org.apache.catalina.net.SSLServerSocketFactory"
               clientAuth="false" protocol="TLS"/> <!-- standard users keystore-->
    </Connector>

    <Connector className="org.apache.catalina.connector.http.HttpConnector"
               address="second_address" port="8443" minProcessors="5" 
maxProcessors="75"
               enableLookups="false"
               acceptCount="10" debug="999" scheme="https" secure="true">
      <Factory className="org.apache.catalina.net.SSLServerSocketFactory"
               clientAuth="false" protocol="TLS"/ 
keystoreFile="common/second.keystore">
    </Connector>

I didn't try it, but it looks logical for me.

Anton.

> -----Original Message-----
> From: n [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 08, 2002 1:45 AM
> To: [EMAIL PROTECTED]
> Subject: Tomcat 4.0.1 SSL experts, please help. 
> 
> 
> I have two separate security certificates, one for each virtual host. The 
> tomcat documentation states, "... it is therefore not possible to assign 
> multiple certificates to a single IP address." However, this box that I 
> have tomcat on has two IP addresses. Therefore, I should be able to run 
> both virtual hosts with their own respective security 
> certificates together 
> in the same tomcat instance. I'm unsure of how I would configure my 
> server.xml file to bind each virtual host to it's own IP if it is at all 
> possible. Does anyone have an idea of how to do this without using Apache 
> to take care of SSL? Thanks for any help. Below is my current 
> server.xml file.
> 
> <Service name="Tomcat-Standalone">
> <Connector className="org.apache.catalina.connector.http.HttpConnector"
> port="80" minProcessors="5" maxProcessors="75"
> enableLookups="true" redirectPort="443"
> acceptCount="10" debug="0" connectionTimeout="60000"/>
> <Connector className="org.apache.catalina.connector.http.HttpConnector"
> port="443" minProcessors="5" maxProcessors="75"
> enableLookups="true"
> acceptCount="10" debug="0" scheme="https" secure="true">
> <Factory className="org.apache.catalina.net.SSLServerSocketFactory"
> clientAuth="false" protocol="TLS"/>
> </Connector>
> <Engine name="Standalone" defaultHost="localhost" debug="0">
> <Host name="localhost" debug="0" appBase="webapps" unpackWARs="true" />
> <Host name="www.mydomain1.com" appBase="webapps">
> <Context path=""
> docBase="domain1"
> crossContext="true"
> debug="0"
> reloadable="false" >
> </Context>
> </Host>
> <Host name="www.mydomain2.com" appBase="webapps">
> <Context path=""
> docBase="domain2"
> crossContext="true"
> debug="0"
> reloadable="false" >
> </Context>
> </Host>
> 
> 
> --
> To unsubscribe:   <mailto:[EMAIL PROTECTED]>
> For additional commands: <mailto:[EMAIL PROTECTED]>
> Troubles with the list: <mailto:[EMAIL PROTECTED]>

--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Reply via email to