Skip to content

Commit

Permalink
ss docs (#977)
Browse files Browse the repository at this point in the history
  • Loading branch information
impactCn authored Sep 28, 2024
1 parent ac0bce3 commit e66cc4b
Show file tree
Hide file tree
Showing 2 changed files with 56 additions and 0 deletions.
28 changes: 28 additions & 0 deletions docs/user-guide/property-config/ssl.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
---
title: Gateway SSL Config
keywords: ["Config"]
description: Gateway SSL Config
---

This article explains how to configure SSL and the questions users often have about SSL configuration.

### question

`ShenYu` receives messages through tomcat, but the actual forwarding is achieved through its own plug-in.

Therefore, configuring tomcat's SSL cannot achieve full-link SSL forwarding. You only need to configure `webClientPlugin` to achieve full-link SSL forwarding.

### Property Config

Take the p12 certificate as an example.

```yaml
shenyu:
httpclient:
ssl:
useInsecureTrustManager: false
keyStoreType: PKCS12
keyStorePath: classpath:keystore.p12
keyStorePassword: 123456
keyPassword: 123456
```
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
---
title: 网关 SSL 配置
keywords: ["配置"]
description: 网关 SSL 配置
---

本文介绍如何配置 SSL 以及用户经常遇到的有关 SSL 配置的问题。

### 问题

`ShenYu` 是通过 tomcat 接收报文,但是实际转发是通过自身插件实现的转发。

所以配置 tomcat 的 SSL 是无法实现全链路进行 SSL 转发,只需要配置 `webClientPlugin` 便能实现全链路进行 SSL 转发。

### 属性配置

以 p12 证书为例。

```yaml
shenyu:
httpclient:
ssl:
useInsecureTrustManager: false
keyStoreType: PKCS12
keyStorePath: classpath:keystore.p12
keyStorePassword: 123456
keyPassword: 123456
```

0 comments on commit e66cc4b

Please sign in to comment.