Security FAQ
Resin

Change Log
Documentation

Orientation
Features
Installation
Configuration
Web Applications
JSP
Servlets and Filters
Databases
Admin (JMX)
Security
XML and XSLT
XTP
Resources (JNDI)
Performance
Protocols
Third-party
Troubleshooting

Authentication
Digest Passwords
Authorization
SSL
Security Manager
Malicious Attacks
FAQ
Scrapbook
Tutorials
Malicious Attacks
Security
Scrapbook

Can I use different SSL certificates for each virtual host?

We have two domains on one server. Is there an example config file showing how to have multiple ssl certificates, one for each virtual host?

This is not possible if you are using Resin's virtual hosting capability to serve to multiple domain names using a single IP address.

The SSL connection (and certificate) are handled before the HTTP request is sent. Unless the domain name is mapped to a unique ip address, the server doesn't know which domain name the user is using until after SSL is set up. There is no way for Resin to determine which domain name the user has specified in the url.

It is possible if you have separate IP addresses for the hosts. You would start seperate <http> servers that only bind on that ip address. Each of these <http> servers can have seperate ssl configurations.


Malicious Attacks
Security
Scrapbook
Copyright © 1998-2003 Caucho Technology, Inc. All rights reserved.
Resin® is a registered trademark, and HardCoretm and Quercustm are trademarks of Caucho Technology, Inc.