Configuring SSL/TLS for tyk quickstart

Support Installation and Deployment
1

Hi,

Using docker, I’ve configured tyk to use SSL/TLS encryption as per the instructions found at https://tyk.io/v1.9/configuration/ssl/ . I then changed the port mapping to the gateway to 443->8080. This adds SSL/TLS encryption to any requests to existing APIs but it appears to be preventing the creation of new APIs via the advanced management API.

Adding a new API and corresponding key is failing. The API portion of the creation appears to be succeeding (which I don’t understand) but the adding key is failing with an error “Failed create:Failed to create key: Post http://tykgateway_1:8080/tyk/keys/create: malformed HTTP response "\x15\x03\x01\x00\x02\x02\x16"”.

I’ve attempted to connect to the gateway container on port 8080 from the host machine and I get a closed connection from the gateway as the server listed in the cert file does not match the host I’m trying to connect to. Could this certificate issue be responsible for the failure to create the key? And if so is there a recommended way of configuring the system to resolve the issue?

Thanks,
Ian.

2

Hi Ian,

I’d suggest looking through this issue on our github repo which talks about SSL in the docker compose setup:

It requires some internal changes and re-configuration.

M.

3

Hi Martin,

Thanks for that. Suggestions in the post have everything working again.

Thanks,
Ian.