[Apiman-user] TLS / SSL

[Marc Savy]

Hi Fadi,

I think you might be getting confused. Are you sure that you want Mutual TLS (i.e. https://en.wikipedia.org/wiki/Mutual_authentication) - in this case the gateway needs to provide a certificate store (and usually a truststore), and the service(s) need to provide a certificate store (and also usually their own truststore).

Are you just trying to enable standard TLS?

Regards,
Marc

----- Original Message -----
From: "Fadi Abdin" <fadiabdeen at gmail.com>
To: "Marc Savy" <marc.savy at redhat.com>
Sent: Monday, 29 June, 2015 7:57:03 PM
Subject: Re: [Apiman-user] TLS / SSL

Hi Marc,

I dont see an error when i enable the debugging.

are you sure about the insturcitons in on
http://www.apiman.io/latest/installation-guide.html#_how_to_enable_mtls_mutual_ssl_support_for_endpoint_security

what should i use for the values in the apiman.properties ?  :

apiman-gateway.connector-factory.tls.keyStore
apiman-gateway.connector-factory.tls.trustStore

should it work as with the instructions or i'm missing something ?

Thanks,
Fadi








On Mon, Jun 29, 2015 at 1:11 PM, Marc Savy <marc.savy at redhat.com> wrote:

> Hi Fadi,
>
> When you fire up the gateway, can you please pass:
>
> -Djavax.net.debug=all
>
> as a flag (see:
> http://www.apiman.io/blog/gateway/security/mutual-auth/ssl/mtls/2015/06/16/mtls-mutual-auth.html#fire-it-up
> )
>
> You might be able to see what the problem is using the output from the
> above. The most common issue is that the certificate-store and/or
> trust-store isn't set up properly.
>
> Regards,
> Marc
>
>
> On 29/06/2015 17:55, Fadi Abdin wrote:
>
>> I'm following the instructions on
>> (
>> http://www.apiman.io/latest/installation-guide.html#_how_to_enable_mtls_mutual_ssl_support_for_endpoint_security
>> )
>> to setup a secured version of the api and after i'm done i get below
>> exeption when i hit a service on the gateway endpoint
>>
>> https://localhost:8443/apiman-gateway/testorg/testservice/1.0
>>
>> io.apiman.gateway.engine.beans.exceptions.ConnectorException: Not
>> connected
>>
>> Any idea what could be the issue ?
>>
>>
>>
>> _______________________________________________
>> Apiman-user mailing list
>> Apiman-user at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/apiman-user
>>
>>
>