Multiple IP addresses is a must to have multiple certificates. I only have one SSL certificate setup so I'm going based on theory here. My summation of what you would need to do is setup two HTTPS connectors with IP based hosting turned on. Each keystore needs to be separate. Don't forget to do the keystores in the right order too. Each one will need a copy of the Root CA Cert and then
<Connector port="8443" address="192.168.0.1" maxThreads="100" strategy="ms" maxHttpHeaderSize="8192" emptySessionPath="true" useIPVHosts="true" scheme="https" secure="true" clientAuth="false" keystoreFile="/tomcat/conf/ip1.keystore" keystorePass="password" sslProtocol = "TLS" /> <Connector port="8443" address="192.168.0.2" maxThreads="100" strategy="ms" maxHttpHeaderSize="8192" emptySessionPath="true" useIPVHosts="true" scheme="https" secure="true" clientAuth="false" keystoreFile="/tomcat/conf/ip2.keystore" keystorePass="password" sslProtocol = "TLS" /> In the <Engine> section you would have two hosts setup like so: <Host name="192.168.0.1" autoDeploy="false" deployOnStartup="false" deployXML="false"> ... </Host> <Host name="192.168.0.2" autoDeploy="false" deployOnStartup="false" deployXML="false"> ... </Host> Chris Berthold IT Systems Analyst Commercial Refrigerator Door Company 941 . 371 . 8110 x 205 -----Original Message----- From: Jorge Isaac MartÃnez Hatch [mailto:[EMAIL PROTECTED] Sent: Thursday, May 04, 2006 1:55 PM To: users@tomcat.apache.org Subject: Intalling two SSL certificates Hi you smart people: I have: - One server running Tomcat 5.5 over Windows. - Two IP addresses. - Two domains, one for each IP address. - Two SSL certificates one for each domain. Goal: Intall two SSL certificates in the same server, but working for two different IP addresses and domains. I tried to install both cerfiticates using the same keysotre and different aliases, but it does not work. It make my second certificate to have the common name (domain) of the first one. Should I use different keystores and different aliases? Do I need to make any extra configuration to specify which IP is related to every domain? What about virtual hosts? Any help on this is welcome, thank you. Isaac Martinez Hatch --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]