Azure/azure-sdk-for-java

[FEATURE REQ] TLS support in Spring Boot with Azure Key Vault Certificates

saragluna opened this issue · 5 comments

Is your feature request related to a problem? Please describe.
Spring web applications can either be an HTTP client or an HTTP server, if an application wants to secure the HTTP communication via TLS and the certificates are stored in Azure Key Vault, spring-cloud-azure-starter-keyvault-certificates should support it.

  • If one-way TLS is used:
    • In the case of an HTTP server, users shall be able to configure the server's certificates in Azure Key Vault.
    • In the case of an HTTP client, users shall be able to validate the server's certificates stored in Azure Key Vault.
  • If two-way TLS is used:
    • In the case of an HTTP server:
      • Users shall be able to configure the server's certificates in Azure Key Vault.
      • Users shall be able to validate the client certificates in Azure Key Vault.
    • In the case of an HTTP client:
      • Users shall be able to configure the client's certificates stored in Azure Key Vault to the server.
      • Users shall be able to validate the server's certificates stored in Azure Key Vault.

Given Spring MVC or WebFlux is used, the below scenarios should be supported:

  • As a web server, users shall be able to use this feature with Spring MVC with Tomcat, Jetty, and Undertow.
  • As a web server, users shall be able to use this feature with Spring WebFlux with Netty。
  • As a web client, users shall be able to use this feature with Spring MVC and RestTemplate.
  • As a web client, users shall be able to use this feature with Spring WebFlux and Web Client.

Additional context
N/A

Information Checklist
Kindly make sure that you have added all the following information above and checkoff the required fields otherwise we will treat the issuer as an incomplete report

  • Description Added
  • Expected solution specified
stliu commented

#25880 the sample should be updated as well

Link to user issue: #32854

We require this feature too in spring-azure libs 4.x+ and 5.x+. We are stuck using the old 3.x libraries because of this.

Hi @rvervaek , thanks for using our library!
We have received your submission and will take it into consideration and will keep you updated on the progress of our review.