Skip to main content

2 Different Certificates on Same Glasshfish installation

3 replies [Last post]
nformosa
Offline
Joined: 2009-05-20
Points: 0

Hi All,

I'm pretty new to Glassfish, and the whole Server issue. I was asked to lookup for the possibility of having 2 certificates on the same server, which will enable certification for the same web page having 2 different domain names.

Is it possible?

If so what are the steps to take?

Regards
Nick

Reply viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.
Bruno Bonfils

On Wed 20 May, glassfish@javadesktop.org wrote:
> Hi All,
>
> I'm pretty new to Glassfish, and the whole Server issue. I was asked
> to lookup for the possibility of having 2 certificates on the same
> server, which will enable certification for the same web page having 2
> different domain names.

It's not possible to achieve that on the same HTTP connector. There are
some RFC which allow that (google://tls sni) however Glassfish doesn't
support that (at least for gf2), afaik. However, it should be possible
to use a single certificate with two differents names (look for
SubjectAlternativesNames X509v3 extension).

My two cents

--
http://asyd.net/home/ - Home Page
http://guses.org/home/ - French Speaking (Open)Solaris User Group
http://netvibes.com/asyd - Portal

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@glassfish.dev.java.net
For additional commands, e-mail: users-help@glassfish.dev.java.net

nformosa
Offline
Joined: 2009-05-20
Points: 0

Hi Bruno,

Sorry for getting back after some time but i had to do my proper homework..

I've found out that having 2 certificates in the same keystore is possible on glassfish, as long as they are mapped to different IPs. This makes sense, even though i'm still pretty much lost.

If this is correct

1. How do i install more than one certificate in the keystore (having a different private key each)

2. When an IP is mapped, would that be a http listener?

Any answers would be great, even links to good reading would be helpful.

Regards
Nick

ghibortz
Offline
Joined: 2011-07-06
Points: 0

Does Glassfish 3.1 support SNI? I can't find this information in the documentation.

Thank you!