Mutual TLS to backend server with Self-signed Cert

[etienned]

Hi,

I am currently testing Mutual TLS between Apigee Edge and a backend with a self signed certificate. The self-signed certificate is just for testing and and a signed cert will be used in Prod.

So I have configure the Keystore with the Server cert and key and also created a truststore with only the server cert. When testing the certs in the UI I keep on getting the following error: Error: Invalid Truststore. Unable to find valid certification path to requested target

I have done a couple of mutual TLS integrations to backend with CA signed Certs, but this is the first with a Self-signed cert.

How do you need to setup the Truststore for this to work? To generate the selfsigned cert i used the following command: openssl req -x509 -newkey rsa:4096 -nodes -out cert.pem -keyout key.pem -days 365