Skip to main content

Posts

Showing posts with the label TLS

Generate and configure TLS certs for an application in Kubernetes at Ingress level

TLS basic working model:  Secure communication between the two entities is paramount in today's digital world. TLS provides the secure end to end communication between two machines over a network. Classic example of TLS model is accessing www.google.com(server) via browser(client). Following basic steps are involved * Client makes a call, when URL was entered in browser * Server sends its certificate * Browser will check any Root CA present for server certificate, if its present it will validate via digital sign. If not it asks user to trust the certificate, happens when we use self signed certificates. *  Client sends its certificates, will be verified at server, its optional * Once verification is done, it starts exchanging encrypting messages, which will be only decrypted using certs and keys at their end. Generating TLS certs: There are many tools in market through which we can generate certs. Openssl is one of the widely used opensource tool, we will ...