Hi All,
We are trying to reach backend service from Apigee X using ingress ILB in GKE.
PFB the Steps which we have implemented from Apigee X end-
- Created trust Store-> upload server certificate chain.cer.
Admin->Environments->TLS Keystores->Create Trust store->Alias Name->upload certificate
2. Created reference for Trust Store -
Admin->Environments->References->create name and attached references of trust store.
3. A target can be represented by an XML object like the one below(using One-way TLS certification)-
<HTTPTargetConnection>
<Properties/>
<URL>https:myTargetAddress</URL>
<SSLInfo>
<Enabled>true</Enabled>
<ClientAuthEnabled>false</ClientAuthEnabled>
<TrustStore>ref://myTruststoreRef</TrustStore>
<IgnoreValidationErrors>false</IgnoreValidationErrors>
</SSLInfo>
</HTTPTargetConnection>
4. Validating api proxy from postman and getting error-
{
"fault": {
"faultstring": "SSL Handshake failed sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target",
"detail": {
"errorcode": "messaging.adaptors.http.flow.SslHandshakeFailed"
}
}
}
We followed Apigee document- https://cloud.google.com/apigee/docs/api-platform/system-administration/options-configuring-tls
We have also tried with LGRootCertificate_chain but result is same.
LinkedIn
Twitter
