diff --git a/docs/user-guide/property-config/ssl.md b/docs/user-guide/property-config/ssl.md new file mode 100644 index 00000000000..624d11390a5 --- /dev/null +++ b/docs/user-guide/property-config/ssl.md @@ -0,0 +1,28 @@ +--- +title: Gateway SSL Config +keywords: ["Config"] +description: Gateway SSL Config +--- + +This article explains how to configure SSL and the questions users often have about SSL configuration. + +### question + +`ShenYu` receives messages through tomcat, but the actual forwarding is achieved through its own plug-in. + +Therefore, configuring tomcat's SSL cannot achieve full-link SSL forwarding. You only need to configure `webClientPlugin` to achieve full-link SSL forwarding. + +### Property Config + +Take the p12 certificate as an example. + +```yaml +shenyu: + httpclient: + ssl: + useInsecureTrustManager: false + keyStoreType: PKCS12 + keyStorePath: classpath:keystore.p12 + keyStorePassword: 123456 + keyPassword: 123456 +``` diff --git a/i18n/zh/docusaurus-plugin-content-docs/current/user-guide/property-config/ssl.md b/i18n/zh/docusaurus-plugin-content-docs/current/user-guide/property-config/ssl.md new file mode 100644 index 00000000000..5296eb87587 --- /dev/null +++ b/i18n/zh/docusaurus-plugin-content-docs/current/user-guide/property-config/ssl.md @@ -0,0 +1,28 @@ +--- +title: 网关 SSL 配置 +keywords: ["配置"] +description: 网关 SSL 配置 +--- + +本文介绍如何配置 SSL 以及用户经常遇到的有关 SSL 配置的问题。 + +### 问题 + +`ShenYu` 是通过 tomcat 接收报文,但是实际转发是通过自身插件实现的转发。 + +所以配置 tomcat 的 SSL 是无法实现全链路进行 SSL 转发,只需要配置 `webClientPlugin` 便能实现全链路进行 SSL 转发。 + +### 属性配置 + +以 p12 证书为例。 + +```yaml +shenyu: + httpclient: + ssl: + useInsecureTrustManager: false + keyStoreType: PKCS12 + keyStorePath: classpath:keystore.p12 + keyStorePassword: 123456 + keyPassword: 123456 +```