Currently we have a big customer using Mobile Foundation and Kubernetes. And the default CA of Kubernetes Ingress is signed by Let's Encrypt, which is not included in IBM JRE, which is the supported JRE for Mobile Foundation Server in IBM Cloud.
Our customer is securing their services in Kubernetes with TLS mutual authentication, and being the CA Let's Encrypt is not possible to call those services from Mobile First Server, and that is because is not possible to add custom certificates to the Mobile Foundation Server.
We need that option enable, I think the best way is to enable adding pem files that should be added to the cacerts of the IBM JRE runtime.
| Idea priority | High |
By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.
Hi Raj, I think your suggestion are not possible to be implemented from my side. I'm the IBM Cloud Public service Mobile Foundation and I can't edit the container files. The first blog talks about an option called "Advanced Settings", and I didn't find it. I wrote to Sachin to see if he can help me.
Thanks a lot for your suggestions.
Some suggestions and ideas to see if they meet your ask...
https://mobilefirstplatform.ibmcloud.com/blog/2016/03/31/how-to-update-the-truststore-on-ibm-mobilefirst-foundation-on-bluemix/
https://github.com/docker-library/docker/issues/99
https://rootsquash.com/2016/05/02/inserting-certificates-into-java-keystore-via-dockerfile/