Spring / Spring CredHub Interview questions
What is mutual TLS authentication in Spring CredHub?
Mutual TLS (mTLS) is the default way an app on Cloud Foundry authenticates to CredHub: both sides present a certificate during the TLS handshake, so the connection itself proves who the app is, with no separate token or credential needed.
On Cloud Foundry, this works because the platform's container security provider injects an app-identity certificate into the app's trust store and keystore automatically, and CredHub is configured to trust certificates issued by the same platform CA.
To use it from Spring CredHub, you only set spring.credhub.url — no OAuth2 properties — and auto-configuration builds a CredHubTemplate that relies on the container's TLS identity instead of a bearer token.
In mutual TLS, what proves an app's identity to CredHub?
What Cloud Foundry component injects the app's mTLS identity certificate?
More Related questions...
