Implementing HTTPS API Proxy With Anypoint API Manager | MuleSoft | Secret Manager | SSL Offloading

Implementing HTTPS API Proxy With Anypoint API Manager | MuleSoft | Secrets Manager | SSL Offloading

[@danielecasal2961]

Hi Jitendra, I am trying to set up Mutual TLS between the proxy and the api implementation. The api implementation is hosted outside of Anypoint Platform, hence the need for additional security. The proxy would be the client and the api implementation the server. I am using the "TLS Context for outbound traffic", specifying a keystore and a trustore in that security group. Is this even possible? I keep getting "Domain not found", no matter what I do. Hope you can give me some direction. Many thanks in advance

[@muletechnologyacademy-zero5625]

Hi, please connect me our linkedin and we can discuss this. One of thing shared load balancer doesnt support 2 way authentication. I need understand more that exactly what u trying to do.

[@rishik8166]

Hi Jitendra, Thanks for your very useful videos. I am trying to do a mutual TLS between my external Java Service to Mule Proxy. I created my own CA certificate and added those to my client keystore and server keystore. Created client and server truststore. In secrets Manager i configured TLS context with server keystore and truststore. In API Manager i added this context to inbound requests with https, my mule application outbound is still http only. From Postman i added client crt and key to the certificates tab and when i make https call to proxy i am getting 502 Bad Gateway (We couldn't find any Cloudhub application listening on this API). I even added server certificates to keychain on my local machine as trusted. Can you please point what i am missing? If i add only keystore in TLS context without turststore and from postman it is working fine (I didnt add any certficates in the postman request). When i inspect the certificate i see Digicert Global Root CA which is a certificate from MuleSoft. Isn't supposed to get the certificate i added?

[@manilkumar7964]

hi sir, i have created secret group, keystore and TLS context in secret manager while i am selecting secret group in api manager for HTTPS configuration i am unable to find it , can you guide me how to get that

[@muletechnologyacademy-zero5625]

Please follow proper steps. You will able to achieve same. Make sure to finish edit in secret manager