Company
Date Published
Author
Matthew Casperson
Word count
483
Language
English
Hacker News points
None

Summary

Tomcat 8.5+ enhances its support for secure networking by allowing multiple certificate types for each host, accommodating both RSA and ECDSA certificates to cater to a range of browser compatibility. This feature is particularly advantageous for supporting older browsers with RSA and newer, compatible browsers with ECDSA. The blog post provides a detailed guide on generating self-signed RSA and ECDSA keys using OpenSSL commands, configuring Tomcat with these certificates by adding multiple `<Certificate>` elements to a `<SSLHostConfig>` element in the `server.xml` configuration file, and verifying the setup with an online service. This dual certificate support ensures a broad client reach while maintaining security, and the post concludes with a mention of Octopus Deploy for automating Java application deployments.