Solved

Using a wildcard SSL Certificate in Tomcat

Posted on 2014-11-20
2
433 Views
Last Modified: 2014-12-02
Hello

I am trying to allow users to externally access some SAP programs that use Tomcat. I would like to use a wildcard SSL certificate we already own. I have searched for a few days on how to do this but only find guides for creating your own certificate.

Thanks for your help in advance.
0
Comment
Question by:Crossroads305
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 64

Accepted Solution

by:
btan earned 500 total points
ID: 40456722
you shoild start with cert req if the intent is to leverage 3rd party trusted CA or internal Enterprise CA. I do advise not to use self signed @ http://scn.sap.com/docs/DOC-46819
you may want to explore SAN instead of wildcard (which may not be supported by SAP service if applicable) instead
we will need to generate both SSL certificates in such a way they will be valid no matter which hostname is used for sending the HTTP requests (each SAP system can be reached in fact via two different hostnames). This can be achieved by means of a X.509 extension called Subject Alternatives Names or shortly SAN
Specific to Tomcat SSL , pls see configuration to install cert from CA @ http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Installing_a_Certificate_from_a_Certificate_Authority
0
 
LVL 33

Expert Comment

by:shalomc
ID: 40460826
Simple when you know it :)

Read the link graciously provided by btan. Essentially, the process to use your self-created cert is nearly identical to the process of using a CA issued wildcard cert. You need 3 files.

Get the private key that was used to create the CSR for the wildcard cert you own. This is the equivalent of the "Local Certificate" in the "Create a local Certificate Signing Request (CSR)" section.
Get the wildcard certificate itself
Get the CA chain certificate.
Someone in your organization has all three because you use them
You do not need to create a CSR.
Follow the instructions in "Importing the Certificate"
Follow the instructions in "Edit the Tomcat Configuration File" but use your wildcard certificate, private key and CA chain

Good luck!!
0

Featured Post

Optimum High-Definition Video Viewing and Control

The ATEN VM0404HA 4x4 4K HDMI Matrix Switch supports 4K resolutions of UHD (3840 x 2160) and DCI (4096 x 2160) with refresh rates of 30 Hz (4:4:4) and 60 Hz (4:2:0). It is ideal for applications where the routing of 4K digital signals is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Since pre-biblical times, humans have sought ways to keep secrets, and share the secrets selectively.  This article explores the ways PHP can be used to hide and encrypt information.
Introduction This article is intended for those who are new to PHP error handling (https://www.experts-exchange.com/articles/11769/And-by-the-way-I-am-New-to-PHP.html).  It addresses one of the most common problems that plague beginning PHP develop…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question