CODEWITHSUNDEEP
springsslamazon-ec2hashicorp-vault
Killyz
Killyz

Reputation: 109

Configure Spring Vault with TLS

I can't find any documentation on how to properly setup Spring Vault in production environment. It's been said not to use tls_disable = 1 in production.

I'm running vault on an empty ec2 instance, i authenticate my application manually with a token and would like to continue doing so. I'm just looking for the proper way of creating the necessary certificates so it could work with https and not http as the documentation suggests.

Upvotes: 0

Views: 2577

Answers (1)

mp911de
mp911de

Reputation: 18119

You have two options:

  1. For testing purposes, you can set the protocol scheme to HTTP:
VaultEndpoint endpoint = new VaultEndpoint();
endpoint.setHost("localhost");
endpoint.setPort(8200);
endpoint.setScheme("http");

new VaultTemplate(endpoint, …)
  1. For production: There are a few options for certificates, ranging from running a company-wide CA over setting up an intermediate CA to self-signed certificates. For Spring Vault, we created a script that helps us during testing by creating a CA and importing these certificates into a temporary truststore. You can find it here to get some inspiration. This script does not replace proper security policies and a responsible certificate handling.

Upvotes: 1

Related Questions