[TOMEE-1910] SNI fails for cxf and tomcat7-maven-plugin

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Auto Closed
• Affects Version/s: 1.7.4
• Component/s: TomEE Core Server
• Assignee: Unassigned
• Reporter: Matthew Broadhead
• Created: 23/Aug/16 09:30
• Updated: 17/May/23 18:50
• Resolved: 17/May/23 18:50

Description

Hi,

I tried asking this question on the tomcat users mailing list but there was no response.

Basically I have TomEE running behind Httpd httpd-2.4.6-40.el7.centos.4.x86_64. My java version is:
openjdk version "1.8.0_101"
OpenJDK Runtime Environment (build 1.8.0_101-b13)
OpenJDK 64-Bit Server VM (build 25.101-b13, mixed mode)

SNI works fine on Httpd and I can add certificates to any of the virtual hosts and it works fine in the browser. but when i added an extra https virtual host suddenly my main host was not primary and all the CXF WebClient REST stuff fails. Also tomcat7-maven-plugin failed to deploy to the server saying the certificate was wrong and showed the primary host certificate instead of the one specified
[ERROR] Failed to execute goal org.apache.tomcat.maven:tomcat7-maven-plugin:2.3-SNAPSHOT:redeploy (default-cli) on project domain2: Cannot invoke Tomcat manager: hostname in certificate didn't match: <www.domain2.com> != <domain1.com> OR <domain1.com> OR <www.domain1.com> -> [Help 1]

is my java lacking SNI support? is the only way around the problem to use a single multi domain SSL certificate?