Is it possible to use the certificates stored on Apigee SSL store in Node.js callouts?

[vivek_kumar]

Currently, we are using SB certificates and password files when making calls to the backend. When the certificate expires, we have to replace these certificates with the new ones and re-deploy, the apis again.

If we could resolve the certs from the environment level SSL keystore, above issue will become moot and we just have to replace the certs once.

Thoughts/Suggestions?

Thanks,

Girish

[gaurav_bhandari]

@Vivek Kumar

If your certs are stored in APIGEE provided Keystore, then you do not need to deploy/undeploy api proxies after renewed certs are added.

You need to restart Router and MP.

In case your architecture of creating the APIGEE KEYSTORE(Its trusstore for adding the 3rd party certs) in such a way that you have separate KEYSTORE for GATEWAY CERTS (VIPS) and KEYSTORE for backend.

In this case, if you are adding the certs for BACKEND 2way SSL communication, then only MP restart is required and if you are adding the certs for Front end (Northbound) 2ay ssl, then only Router restart is required.

Please let me know in case you need more clarification