Mastering Spring Cloud

Serving Eureka over HTTPS

When the Eureka server starts with Spring Boot, it is deployed on an embedded Tomcat container, so the SSL configuration is the same as for the standard microservice. The difference is that we must take account of the client-side application, which establishes a secure connection with a discovery server over HTTPS. The discovery client should authenticate itself against the Eureka server and it should also verify the server's certificate. That communication process between client and server is called two-way SSL or mutual authentication. There is also one-way authentication, which is in fact the default option, where only the client validates the server's public key. Java applications use KeyStore and trustStore ...