Topik ini menjelaskan cara membuat sertifikat TLS yang ditandatangani sendiri untuk digunakan dalam konfigurasi lingkungan. Informasi ini hanya ditujukan untuk tujuan uji coba atau pengujian.
Gateway ingress runtime (gateway yang menangani traffic proxy API) memerlukan
pasangan kunci/sertifikat TLS. Untuk penginstalan panduan memulai ini, Anda dapat menggunakan kredensial yang ditandatangani sendiri. Pada langkah-langkah berikut, openssl digunakan
untuk membuat kredensial.
Buka direktori diagram HELM_CHARTS_HOME/apigee-virtualhost/ dan jalankan perintah berikut untuk membuat file sertifikat dan kunci. File sertifikat kemungkinan besar akan memiliki ekstensi .crt atau .pem dan file kunci kemungkinan besar akan memiliki .key.
Perintah ini membuat pasangan kunci/sertifikat yang ditandatangani sendiri yang dapat Anda gunakan untuk
penginstalan memulai cepat. CN mydomain.net dapat berupa nilai apa pun yang Anda inginkan untuk
kredensial yang ditandatangani sendiri.
Periksa untuk memastikan file berada di direktori ./certs:
ls ./certs
keystore.pem
keystore.key
Dengan keystore.pem adalah file sertifikat TLS yang ditandatangani sendiri dan keystore.key
adalah file kunci.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-09-03 UTC."],[[["\u003cp\u003eThis guide details the creation of self-signed TLS certificates for trial or testing environments.\u003c/p\u003e\n"],["\u003cp\u003eSelf-signed certificates are not recommended for production and should be used only for development, trials, or testing.\u003c/p\u003e\n"],["\u003cp\u003eThe runtime ingress gateway requires a TLS certificate/key pair, which can be self-signed for quickstart installations.\u003c/p\u003e\n"],["\u003cp\u003eOpenSSL is used to generate the certificate and key files, with the provided command creating a pair that can be used immediately.\u003c/p\u003e\n"],["\u003cp\u003eThe generated certificate and key files, typically with \u003ccode\u003e.crt\u003c/code\u003e or \u003ccode\u003e.pem\u003c/code\u003e and \u003ccode\u003e.key\u003c/code\u003e extensions respectively, should be stored in the \u003ccode\u003eHELM_CHARTS_HOME/apigee-virtualhost/\u003c/code\u003e directory.\u003c/p\u003e\n"]]],[],null,["# Generate self-signed TLS credentials\n\n| You are currently viewing version 1.14 of the Apigee hybrid documentation. For more information, see [Supported versions](/apigee/docs/hybrid/supported-platforms#supported-versions).\n\n\nThis topic explains how to create self-signed TLS certificates for use in an\nenvironment configuration. This information is intended for trial or testing\npurposes only.\n| **Warning:** Self-signed certificates are not recommended for production. Only consider using them for development, trial, or testing purposes.\n\n\nThe runtime ingress gateway (the gateway that handles API proxy traffic) requires\na TLS certificate/key pair. For this quickstart installation, you can use self-signed\ncredentials. In the following steps, [openssl](https://www.openssl.org/) is used\nto generate the credentials.\n\n 1. Navigate to your \u003cvar translate=\"no\"\u003eHELM_CHARTS_HOME\u003c/var\u003e`/apigee-virtualhost/` chart directory and execute the following command to create the certificate and key files. The certificate files will most likely have `.crt` or `.pem` extensions and the key file will most likely have `.key`. **Note:** We recommend storing the certificate and key files in your \u003cvar translate=\"no\"\u003eHELM_CHARTS_HOME\u003c/var\u003e`/apigee-virtualhost/` chart directory. \n\n ```\n openssl req -nodes -new -x509 -keyout ./certs/keystore.key -out \\\n ./certs/keystore.pem -subj '/CN=mydomain.net' -days 3650\n ```\n\n\n This command creates a self-signed certificate/key pair that you can use for the\n quickstart installation. The CN `mydomain.net` can be any value you wish for\n the self-signed credentials.\n2. Check to make sure the files are in the `./certs` directory: \n\n ls ./certs\n keystore.pem\n keystore.key\n\n\n Where `keystore.pem` is the self-signed TLS certificate file and `keystore.key`\n is the key file."]]
