HTTPS transmits HTTP through TLS, protecting communication and authenticating the server. It is especially important for HTTP Basic authentication, whose Base64-encoded credentials are not encrypted. section 2.2
HTTPS can be enabled at several layers:
- Configure it in the application with Spring Boot. section 2.2
- Terminate it through a service mesh or infrastructure layer. section 2.2
- Use a certificate keystore, such as PKCS12, with the server SSL settings. section 2.2
A local Spring Boot endpoint
Generate a certificate, package it as PKCS12, configure the keystore, and call the endpoint over https://localhost:8080/hello. The curl example uses HTTP Basic credentials and returns “Hello!”. section 2.2
openssl req -newkey rsa:2048 -x509 -keyout key.pem -out cert.pem -days 365
Generate a self-signed certificate for a local HTTPS setup with OpenSSL. section 2.2
