How can i use starcom signed ssl certificate on restexpress

[aashish kumar]

Hi,

I am not able to use starcom signed certificates for restexpress.

after following this "https://objects.startpki.net/installonserver/Tomcat_startcom.pdf " given by starcom for tomcat server. still it is showing your connection is not secured.

please help how can i make my rest urls secure.

[Todd Fredrich]

Hi Aashish,

RestExpress uses Netty as its server instead of Tomcat. So those procedures won't work.

Most often, when an API is hosted, it's behind a proxy or load balancer of some sort (HAProxy, Linkerd, NGINX, etc.) and it's that proxy that hosts the certificates. Using non-SSL/TLS behind that load balancer is usually OK because the API is behind your firewall.

Optionally, you can choose to run an HAProxy on the same box as your API, using the HAProxy to host the cert and perform API traffic on the loopback interface (127.0.0.1).

Or, you can implement SSL in RestExpress using the tips in this thread: https://groups.google.com/forum/#!searchin/restexpress/ssl%7Csort:relevance/restexpress/O_MpgN8g5lk/W4CtAuz0y4UJ

I hope this helps!

--Todd