Solved

Using a wildcard SSL Certificate in Tomcat

Posted on 2014-11-20
2
398 Views
Last Modified: 2014-12-02
Hello

I am trying to allow users to externally access some SAP programs that use Tomcat. I would like to use a wildcard SSL certificate we already own. I have searched for a few days on how to do this but only find guides for creating your own certificate.

Thanks for your help in advance.
0
Comment
Question by:Crossroads305
2 Comments
 
LVL 62

Accepted Solution

by:
btan earned 500 total points
ID: 40456722
you shoild start with cert req if the intent is to leverage 3rd party trusted CA or internal Enterprise CA. I do advise not to use self signed @ http://scn.sap.com/docs/DOC-46819
you may want to explore SAN instead of wildcard (which may not be supported by SAP service if applicable) instead
we will need to generate both SSL certificates in such a way they will be valid no matter which hostname is used for sending the HTTP requests (each SAP system can be reached in fact via two different hostnames). This can be achieved by means of a X.509 extension called Subject Alternatives Names or shortly SAN
Specific to Tomcat SSL , pls see configuration to install cert from CA @ http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Installing_a_Certificate_from_a_Certificate_Authority
0
 
LVL 33

Expert Comment

by:shalomc
ID: 40460826
Simple when you know it :)

Read the link graciously provided by btan. Essentially, the process to use your self-created cert is nearly identical to the process of using a CA issued wildcard cert. You need 3 files.

Get the private key that was used to create the CSR for the wildcard cert you own. This is the equivalent of the "Local Certificate" in the "Create a local Certificate Signing Request (CSR)" section.
Get the wildcard certificate itself
Get the CA chain certificate.
Someone in your organization has all three because you use them
You do not need to create a CSR.
Follow the instructions in "Importing the Certificate"
Follow the instructions in "Edit the Tomcat Configuration File" but use your wildcard certificate, private key and CA chain

Good luck!!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

#SSL #TLS #Citrix #HTTPS #PKI #Compliance #Certificate #Encryption #StoreFront #Web Interface #Citrix XenApp
Microservice architecture adoption brings many advantages, but can add intricacy. Selecting the right orchestration tool is most important for business specific needs.
Video by: Mark
This lesson goes over how to construct ordered and unordered lists and how to create hyperlinks.
Many functions in Excel can make decisions. The most simple of these is the IF function: it returns a value depending on whether a condition you describe is true or false. Once you get the hang of using the IF function, you will find it easier to us…

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now