Self-Signed
Defines a TLS profile that generates a self-signed certificate for local development and testing.
Only usable for server.encrypt.tls.
|
Description
The certificate and its private key are generated on startup and kept in memory. Nothing is written to disk and no files are needed, which makes this the quickest way to run HTTPS locally.
Clients won’t trust the certificate, so they need to skip validation (such as curl --insecure) or trust the served certificate directly. A warning is logged whenever this profile is used for server.encrypt.tls.
A new certificate is generated each time the application starts or reloads. Anything that trusted the previous certificate has to trust the new one. Each certificate is valid for one year.
Example
-
YAML
-
JSON
tls:
- name: selfsigned
id: dev
hosts:
- localhost
- tiles.test{
"tls": [
{
"name": "selfsigned",
"id": "dev",
"hosts": [
"localhost",
"tiles.test"
]
}
]
}Configuration
| Parameter | Description | Type | Required | Default |
|---|---|---|---|---|
|
The unique identifier of the profile used to reference this profile elsewhere in configuration. |
string |
Yes |
None |
|
The minimum TLS version to allow. Can be |
string |
No |
1.2 |
|
The hostnames and IP addresses the certificate covers and to redirect to. Wildcards aren’t supported |
string[] |
No |
|