/
Multiple Certificate support

Multiple Certificate support

Owned by Sovann Huynh

Overview

In the effort to support multiple certificates configuration, CONNECT had been implemented to use Wildfly 15 SNI configuration to allow the different X509 Certificates to be switch at TLS layer with SNI value with Exchange Manager configuration.  for additional support in configuration see the following documents

Exchange Manager (initiator)

for sniName value under the exchangeInfo.xml, the initiator will need to know what the responding gateway SNI value are before it can be send at TLS layer.  if the initiator had more than one X509 certificates, it need to selected a certificate with certificateAlias under exchangeInfo.xml the certificate should be coordinate with CA trust used by the exchange.

Related content