Introducing Spring Cloud Azure Starter Key Vault JCA: Streamlined TLS and mTLS for Spring Boot
Table of Contents
- Introduction
- Get Started
- Enable Embedded Server TLS
- Secure RestTemplate
- Server Side Configuration
- Client Side Configuration
- Resources
Introduction
Introducing the Spring Cloud Azure Starter Key Vault JCA, a new addition to the Spring Cloud Azure family designed for Spring Boot 3.1+. This starter simplifies secure communication in Spring Boot applications by integrating Azure Key Vault's certificate management with Spring's security framework.
Get Started
Add Dependency
Add the Spring Cloud Azure Starter Key Vault JCA dependency to your project.
Prepare Azure Resources
Create self-signed certificates in Key Vault resources, create a Service Principal for accessing Key Vault, and grant roles to the Service Principal for each Key Vault instance.
Enable Embedded Server TLS
Secure inbound HTTP calls for the embedded server by updating your configuration.
Secure RestTemplate
Secure outbound HTTP calls using a Key Vault SSL Bundle with RestTemplate.
Server Side Configuration
Update your server-side configuration to trust the client certificates in Key Vault and enable client authentication.
Client Side Configuration
Update your client-side configuration to provide a keystore for client authentication in Key Vault.
Resources
Explore more about Spring Cloud Azure and how to enable HTTPS in Spring Boot applications using Azure Key Vault.