Self-Signed TLS Setup for Reverse Proxy

[evgenyigumnov]

We need to configure a reverse proxy setup using Caddy with self-signed TLS certificates for secure communication between our clients and the CBLT web server. The goal is to ensure that the proxy and web server communicate over a secure channel.

Details:

• Objective: Establish a secure mTLS setup for the CBLT web server using self-signed certificates and Caddy as the reverse proxy.

• Configuration Example:

  
  "example.com" {
  reverse_proxy "https://upstream.example.com" {
      transport http {
          tls {
              tls_insecure_skip_verify
          }
      }
  }
  }  

• Requirements:

  • Generate self-signed certificates and specify their paths in the Caddy configuration.
  • Configure the reverse proxy to skip certificate verification if necessary, using tls_insecure_skip_verify.
  • Ensure the CBLT web server listens on the specified port (e.g., 8443) and accepts secure traffic.

Tasks:

1. Generate self-signed certificates and provide paths for cert.pem and key.pem.
2. Test the setup to ensure secure communication and provide debugging if issues arise.

Expected Outcome: A functioning reverse proxy setup with self-signed TLS certificates, providing secure communication between the client and the CBLT web server.