Solved

Using a wildcard SSL Certificate in Tomcat

Posted on 2014-11-20
2
418 Views
Last Modified: 2014-12-02
Hello

I am trying to allow users to externally access some SAP programs that use Tomcat. I would like to use a wildcard SSL certificate we already own. I have searched for a few days on how to do this but only find guides for creating your own certificate.

Thanks for your help in advance.
0
Comment
Question by:Crossroads305
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 63

Accepted Solution

by:
btan earned 500 total points
ID: 40456722
you shoild start with cert req if the intent is to leverage 3rd party trusted CA or internal Enterprise CA. I do advise not to use self signed @ http://scn.sap.com/docs/DOC-46819
you may want to explore SAN instead of wildcard (which may not be supported by SAP service if applicable) instead
we will need to generate both SSL certificates in such a way they will be valid no matter which hostname is used for sending the HTTP requests (each SAP system can be reached in fact via two different hostnames). This can be achieved by means of a X.509 extension called Subject Alternatives Names or shortly SAN
Specific to Tomcat SSL , pls see configuration to install cert from CA @ http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Installing_a_Certificate_from_a_Certificate_Authority
0
 
LVL 33

Expert Comment

by:shalomc
ID: 40460826
Simple when you know it :)

Read the link graciously provided by btan. Essentially, the process to use your self-created cert is nearly identical to the process of using a CA issued wildcard cert. You need 3 files.

Get the private key that was used to create the CSR for the wildcard cert you own. This is the equivalent of the "Local Certificate" in the "Create a local Certificate Signing Request (CSR)" section.
Get the wildcard certificate itself
Get the CA chain certificate.
Someone in your organization has all three because you use them
You do not need to create a CSR.
Follow the instructions in "Importing the Certificate"
Follow the instructions in "Edit the Tomcat Configuration File" but use your wildcard certificate, private key and CA chain

Good luck!!
0

Featured Post

Is Your DevOps Pipeline Leaking?

Is your CI/CD pipeline a hodge-podge of randomly connected tools? You’ve likely got a tool to fix one problem & then a different tool to fix another, resulting in a cluster of tools with overlapping functionality. Learn how to optimize your pipeline with Gartner's recommendations

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In my time as an SEO for the last 2 years and in the questions I have assisted with on here I have always seen the need to redirect from non-www urls to their www versions. For instance redirecting http://domain.com (http://domain.com) to http…
Introduction This article is intended for those who are new to PHP error handling (https://www.experts-exchange.com/articles/11769/And-by-the-way-I-am-New-to-PHP.html).  It addresses one of the most common problems that plague beginning PHP develop…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question