You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/pages/corefunctionality/configuration.rst
+31-5Lines changed: 31 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -117,19 +117,45 @@ SSL
117
117
---
118
118
119
119
When requests pass through Hoverfly, it needs to decrypt them in order for it to persist them to a database, or to perform matching. So you end up with SSL between Hoverfly and
120
-
the external service, and then SSL again between your client and Hoverfly. To get this to work, Hoverfly comes with it's own self-signed certificate which has to be trusted by
121
-
your client. To avoid the pain of configuring your keystore, Hoverfly's certificate is trusted automatically when you instantiate it.
120
+
the external service, and then SSL again between your client and Hoverfly. To get this to work, Hoverfly comes with it's own CA certificate which has to be trusted by
121
+
your client. To avoid the pain of configuring your keystore, Hoverfly's certificate is trusted automatically when you instantiate it.
122
122
123
-
Alternatively, you can override the default SSL certificate by providing your own certificate and key files via the ``HoverflyConfig`` object, for example:
123
+
Alternatively, you can override the default CA certificate by providing your own certificate and key files via the ``HoverflyConfig`` object, for example:
The input to these config options should be the file path relative to the classpath. Any PEM encoded certificate and key files are supported.
132
131
132
+
Mutual TLS authentication
133
+
-------------------------
134
+
135
+
For two-way or mutual SSL authentication, you can provide Hoverfly with a client certificate and a certificate key that you use to authenticate with the remote server.
0 commit comments