Multiple SSL Certificates in a single Jboss Server

[nibuneganesh]

Hi Guys,

I want to install multiple SSL certificates to a single jboss server so that Jboss server can listen to multiple ssl hostnames.

Is it possible on a single HTTPS port.

ex :-

                   URL                                             App server

     https://www.hostname1.com                   appserverIP:8443  (192.168.2.2:8443)

     https://www.hostname2.com                   appserverIP:8443  (192.168.2.2:8443)

Using apache webserver is an alternative. Actually I don't want to use apache webserver infront of my app server.

Could you please help me on this

[pathduck]

On the same port this is not possible I think, and how would you do the mapping from hostname to hostname:port? You would still need something in front to do the SSL termination, i.e. Apache etc.

If it was different ports it would be possible, except for https://issues.jboss.org/browse/AS7-4261 does not make it possible to specify SSL alias to use. Fixed in 7.1.2 Final though.

[dlofthouse]

FYI that referenced Jira issue is specifically for the management interface - it is not used for the ports exposed by JBoss Web.

[ctomc]

Hi,

Having multiple SSL hosts on same ip/port it not possible by definition of how SSL is done.

But it is possbile to achive this by TLS which has only recently been supported in latest versions of browsers

Also many of servers do not support it or have only recently got support for this functionalty.

for more info on this read http://en.wikipedia.org/wiki/Comparison_of_TLS_Implementations

What you can do is to create another interface (and asign it different ip address) and bind second ssl to it.

or you can have it on different port which imo is ugly.

Or you can do this on apache and then proxy to AS7. Apache supports this when using latest versions of openssl.

also read this:

http://stackoverflow.com/questions/10173265/using-multiple-ssl-certificates-in-single-tomcat-instance

--

Tomaz