secure-access-configure-database-for-ssl
Overview:
There are 4 potential scenarios where you want to use SSL Certificates to secure access.
- Kong Admin API
- Client to Kong API
- Kong to Upstream API
- Database Certificate
Scenario
In this execise, you will configure your database for SSL (scenario 4 above). This allows connections between Kong and your database over HTTPs.
High Level Tasks
- Modify your Kong.conf file
- Enable database ssl: pg_ssl=on or cassandra_ssl=on
- Configure lua_ssl_trusted_certificate = /absolute path of CA authority file in Pem format
- Save and Restart Kong.conf file
- Verify Configurations