Implement SSL on Tomcat (https)

Hi experts,

I am considering to implement SSL on Tomcat (https).

It will open to users in internal network and in external network.

Internal Network and External network has different domain name (internal IP and public IP)

However when I use the keystore to create private key, it allows me to input one domain name only.

./keytool.exe -genkey -alias tomcat -keyalg RSA

If I use public IP as the common name (CN) of the key, internal users cannot access the server.

If I use internal IP, external users cannot access the server.

How can I implement the https so that both internal and external users can access the server successfully?

We do not allow "add exception" due to security policy.

Thanks & Regards,

Gordon Lo