End to end encryption with Openshift-Two-way-SSL
Ron Sengupta
![Ron Sengupta]()
Ron Sengupta
Cybersecurity & Cloud Security Expert | Adversarial Machine Learning & Secure AI Specialist | FSI Compliance- DORA, PCI DSS, ISO 27001, CCM | DevSecOps Expert – Delivering Measurable Risk Reduction
This article aims to demonstrate use cases for Openshift routes to achieve end-to-end encryption. This is a desirable and sometimes mandated configuration for many verticals, which deal with strict regulations.
For example, financial sectors often are extremely careful about their application security standards and always follow a very high level of compliance.
Many critical applications in a financial organization adhere to two-way SSL. This is a scheme where both the server and client need to establish their identity in order to exchange encrypted data via a secure connection.
This POC is based on the Red Hat Enterprise Linux 7.2 and Openshift Container Platform 3.2 (OCP). The samples are using Nginx and Apache to demonstrate configuration.