Solved

Using a wildcard SSL Certificate in Tomcat

Posted on 2014-11-20
2
399 Views
Last Modified: 2014-12-02
Hello

I am trying to allow users to externally access some SAP programs that use Tomcat. I would like to use a wildcard SSL certificate we already own. I have searched for a few days on how to do this but only find guides for creating your own certificate.

Thanks for your help in advance.
0
Comment
Question by:Crossroads305
2 Comments
 
LVL 62

Accepted Solution

by:
btan earned 500 total points
ID: 40456722
you shoild start with cert req if the intent is to leverage 3rd party trusted CA or internal Enterprise CA. I do advise not to use self signed @ http://scn.sap.com/docs/DOC-46819
you may want to explore SAN instead of wildcard (which may not be supported by SAP service if applicable) instead
we will need to generate both SSL certificates in such a way they will be valid no matter which hostname is used for sending the HTTP requests (each SAP system can be reached in fact via two different hostnames). This can be achieved by means of a X.509 extension called Subject Alternatives Names or shortly SAN
Specific to Tomcat SSL , pls see configuration to install cert from CA @ http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Installing_a_Certificate_from_a_Certificate_Authority
0
 
LVL 33

Expert Comment

by:shalomc
ID: 40460826
Simple when you know it :)

Read the link graciously provided by btan. Essentially, the process to use your self-created cert is nearly identical to the process of using a CA issued wildcard cert. You need 3 files.

Get the private key that was used to create the CSR for the wildcard cert you own. This is the equivalent of the "Local Certificate" in the "Create a local Certificate Signing Request (CSR)" section.
Get the wildcard certificate itself
Get the CA chain certificate.
Someone in your organization has all three because you use them
You do not need to create a CSR.
Follow the instructions in "Importing the Certificate"
Follow the instructions in "Edit the Tomcat Configuration File" but use your wildcard certificate, private key and CA chain

Good luck!!
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Imagine a situation that you have installed SSL (http://en.wikipedia.org/wiki/Secure_Sockets_Layer) Certificate on your Cisco ASA (Cisco Adaptive Security Appliance) firewall. Installation of SSL certificate on ASA is an another topic for which you …
In Solr 4.0 it is possible to atomically (or partially) update individual fields in a document. This article will show the operations possible for atomic updating as well as setting up your Solr instance to be able to perform the actions. One major …
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question