Enabling mTLS setup in Emulator

[jsam]

Hi,

We are trying to setup mTLS between Apigee (running locally on emulator not edge or x) and the backend running locally - nginx.

There are documents to achieve this on Apigee edge/hybrid but we want to do some Poc and so if its  possible, want to try the config using emulator. 

Is it possible to have keystore/Truststore configured locally and referred in the proxy configuration in the   TargetEndPoint <HTTPTargetConnection> ?

Thank you for your suggestions. 

Regards

Jim

[AlexET]

Hi @jsam! Thanks for reaching out to the Apigee community. We see that your question hasn't received any suggestions so far. We are now looking into it.

Thank you for your patience, we appreciate your participation!

[AlexET]

Hello @jsam, thanks again for your patience - it appears that this setup should be possible with an external Envoy setup for mTLS, and Envoy should route to Apigee. To help you further, here are some samples that might be of use:

• https://github.com/apigee/terraform-modules/blob/main/modules/apigee-x-mtls-mig/envoy-config-templat...
• https://github.com/apigee/terraform-modules/blob/main/modules/apigee-x-mtls-mig/setup.sh

Additionally, this guide will help you deploy the certs in the trust store: 

I hope these resources are helpful for your POC. Let us know how it goes!