can apollo router can be configured with server certificates and terminate ssl ?

[arunarivarasan]

can apollo router be configured with server certificates and terminate ssl. i want to expose the federated endpoint in https.

[Geal]

it is not possible right now, you need to add a reverse proxy in front of the router for TLS

[oleshkooo]

I switched the router from http to https as follows:

1. Generated a self-signed certificate using openssl.

2. Changed the configuration of the router:

tls:
  supergraph:
    # The path to the certificate: ./ssl/certificate.pem. Do not remove the extra dot before
    certificate: &certificate ${file../ssl/certificate.pem}
    certificate_chain: *certificate
    key: ${file../ssl/key.pem}

Link to the Apollo Router documentation: https://www.apollographql.com/docs/router/configuration/overview/#tls

[mohansatya32]

can you you help me whether will work for self hosted router? i am tring to do same for self hosted router, i am getting following error. 2024-03-22T13:22:58.035816Z ERROR Failed to read configuration: could not deserialize configuration: expected exactly one certificate
2024-03-22T13:22:58.036052Z INFO stopped
2024-03-22T13:22:58.036279Z ERROR no valid configuration was supplied

[oleshkooo]

What is your router configuration?

[mohansatya32]

I am usind this config
tls:
supergraph:
certificate: ${file./Users/mohan/certificate.pem}
certificate_chain: ${file./Users/mohan/certificate.pem}
key: ${file./Users/mohan/key.pem}

[oleshkooo]

Strange, I also have a self-hosted router and a similar configuration. I'm not getting this error now, although I remember seeing it before