Topik ini menjelaskan cara membuat sertifikat TLS yang ditandatangani sendiri untuk digunakan dalam konfigurasi lingkungan. Informasi ini hanya ditujukan untuk tujuan uji coba atau pengujian.
Gateway ingress runtime (gateway yang menangani traffic proxy API) memerlukan
pasangan kunci/sertifikat TLS. Untuk penginstalan panduan memulai ini, Anda dapat menggunakan kredensial yang ditandatangani sendiri. Pada langkah-langkah berikut, openssl digunakan
untuk membuat kredensial.
Pastikan Anda berada di direktori base_directory/hybrid-files.
Dalam panduan memulai penginstalan, Anda disarankan untuk membuat direktori hybrid-files
yang berisi file yang Anda buat. Struktur file Anda mungkin berbeda dengan struktur
yang disarankan.
Jalankan perintah berikut dari dalam direktori hybrid-files, dengan
./certs adalah direktori yang berisi sertifikat Anda.
Perintah ini membuat pasangan kunci/sertifikat yang ditandatangani sendiri yang dapat Anda gunakan untuk
penginstalan memulai cepat. CN mydomain.net dapat berupa nilai apa pun yang Anda inginkan untuk
kredensial yang ditandatangani sendiri.
Periksa untuk memastikan file berada di direktori ./certs:
ls ./certs
keystore.pem
keystore.key
Dengan keystore.pem adalah file sertifikat TLS yang ditandatangani sendiri dan keystore.key
adalah file kunci.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-18 UTC."],[[["\u003cp\u003eThis document guides you through creating self-signed TLS certificates for trial or testing environments using OpenSSL, specifically within the Apigee hybrid documentation.\u003c/p\u003e\n"],["\u003cp\u003eSelf-signed certificates are strictly for development, trial, or testing, and are not recommended for production environments.\u003c/p\u003e\n"],["\u003cp\u003eThe runtime ingress gateway requires a TLS certificate/key pair, and this document provides a method to generate them for quickstart installations.\u003c/p\u003e\n"],["\u003cp\u003eThe provided OpenSSL command creates a self-signed certificate and key pair (\u003ccode\u003ekeystore.pem\u003c/code\u003e and \u003ccode\u003ekeystore.key\u003c/code\u003e) within the \u003ccode\u003e./certs\u003c/code\u003e directory, for use in the installation.\u003c/p\u003e\n"],["\u003cp\u003eThe current version of the Apigee hybrid documentation (1.3) is end-of-life and you should upgrade to a newer version for long term usage.\u003c/p\u003e\n"]]],[],null,["# Generate self-signed TLS credentials\n\n| You are currently viewing version 1.3 of the Apigee hybrid documentation. **This version is end of life.** You should upgrade to a newer version. For more information, see [Supported versions](/apigee/docs/hybrid/supported-platforms#supported-versions).\n\n\nThis topic explains how to create self-signed TLS certificates for use in an\nenvironment configuration. This information is intended for trial or testing\npurposes only.\n| **Warning:** Self-signed certificates are not recommended for production. Only consider using them for development, trial, or testing purposes.\n\n\nThe runtime ingress gateway (the gateway that handles API proxy traffic) requires\na TLS certificate/key pair. For this quickstart installation, you can use self-signed\ncredentials. In the following steps, [openssl](https://www.openssl.org/) is used\nto generate the credentials.\n\n1. Be sure that you are in the \u003cvar translate=\"no\"\u003ebase_directory\u003c/var\u003e`/hybrid-files` directory. It was suggested in the installation quickstart that you create a `hybrid-files` directory to contain files that you create. Your file structure may differ from the suggested structure.\n2. Execute the following command from inside `hybrid-files` directory, where `./certs` is the directory containing your certificates. \n\n ```\n openssl req -nodes -new -x509 -keyout ./certs/keystore.key -out \\\n ./certs/keystore.pem -subj '/CN=mydomain.net' -days 3650\n ```\n\n\n This command creates a self-signed certificate/key pair that you can use for the\n quickstart installation. The CN `mydomain.net` can be any value you wish for\n the self-signed credentials.\n3. Check to make sure the files are in the `./certs` directory: \n\n ls ./certs\n keystore.pem\n keystore.key\n\n\n Where `keystore.pem` is the self-signed TLS certificate file and `keystore.key`\n is the key file."]]
