<![CDATA[Is it possible to set up SSL for fusionauth directly?]]>I don't want to run a proxy in front of FusionAuth.

]]>https://fusionauth.io/community/forum/topic/180/is-it-possible-to-set-up-ssl-for-fusionauth-directlyRSS for NodeMon, 11 May 2026 02:54:31 GMTFri, 19 Jun 2020 23:07:25 GMT60<![CDATA[Reply to Is it possible to set up SSL for fusionauth directly? on Fri, 23 Feb 2024 20:12:01 GMT]]>@pradhanv88 it is documented here: https://fusionauth.io/docs/reference/configuration

But there is a bug with TLS in recent versions of FusionAuth: https://github.com/FusionAuth/fusionauth-issues/issues/2498

This is scheduled not for this release, but for the next one.

]]>https://fusionauth.io/community/forum/post/7077https://fusionauth.io/community/forum/post/7077Fri, 23 Feb 2024 20:12:01 GMT<![CDATA[Reply to Is it possible to set up SSL for fusionauth directly? on Fri, 23 Feb 2024 04:29:20 GMT]]>@ronn316 Could you please share the link to the documentation for https properties setup?

]]>https://fusionauth.io/community/forum/post/7076https://fusionauth.io/community/forum/post/7076Fri, 23 Feb 2024 04:29:20 GMT<![CDATA[Reply to Is it possible to set up SSL for fusionauth directly? on Sat, 30 Dec 2023 06:09:53 GMT]]>@robotdan does this mean a proxy is not required anymore? I've been trying to configure the new https properties without success.

]]>https://fusionauth.io/community/forum/post/6937https://fusionauth.io/community/forum/post/6937Sat, 30 Dec 2023 06:09:53 GMT<![CDATA[Reply to Is it possible to set up SSL for fusionauth directly? on Mon, 09 Jan 2023 18:50:17 GMT]]>We'll be adding native support for TLS in an upcoming release. See this GitHub issue for reference.
https://github.com/FusionAuth/fusionauth-issues/issues/1996

]]>https://fusionauth.io/community/forum/post/5803https://fusionauth.io/community/forum/post/5803Mon, 09 Jan 2023 18:50:17 GMT<![CDATA[Reply to Is it possible to set up SSL for fusionauth directly? on Mon, 25 Oct 2021 17:31:04 GMT]]>@bharnett thanks for sharing this!

I have on my list to write up a proxy guide, but we do outline the headers you need to pass here, in the cluster guide, in the load balancer section: https://fusionauth.io/docs/v1/tech/installation-guide/cluster/#fusionauth-installation

But you are correct, it should be more obvious.

Thanks for sharing what worked for you!

Dan

]]>https://fusionauth.io/community/forum/post/3865https://fusionauth.io/community/forum/post/3865Mon, 25 Oct 2021 17:31:04 GMT<![CDATA[Reply to Is it possible to set up SSL for fusionauth directly? on Tue, 19 Oct 2021 09:21:37 GMT]]>Because of how IIS process header (server) variables. You need to append HTTP_ to the headers and change dashes to underscores like so:

  <set name="HTTP_X_Forwarded_Proto" value="https" />
  <set name="HTTP_X_Forwarded_Host" value="mydomain.com" />
  <set name="HTTP_X_Forwarded_Port" value="443" />

And now it works. It might be a good idea to add a page on this to the official docs too.

]]>https://fusionauth.io/community/forum/post/3838https://fusionauth.io/community/forum/post/3838Tue, 19 Oct 2021 09:21:37 GMT<![CDATA[Reply to Is it possible to set up SSL for fusionauth directly? on Tue, 19 Oct 2021 00:23:21 GMT]]>I just had to do this with IIS on Windows. Its quite simple and allows you to leave your Tomcat config alone, which for Windows users, is quite daunting and prone to error.

  1. You will need to install the AAR for IIS: https://blogs.sap.com/2014/11/05/how-to-configure-iis-arr-application-request-routing-to-redirect-to-tomcat/
  2. And then add the 443 binding to the IIS default website with your own certificate.

This means I can now use my own secure custom domain (I have a wildcard domain) with SSL.

Although, now I'm getting a Proxy Configuration error which kindly gives me instructions to fix, but I can't get it to work yet...

]]>https://fusionauth.io/community/forum/post/3834https://fusionauth.io/community/forum/post/3834Tue, 19 Oct 2021 00:23:21 GMT<![CDATA[Reply to Is it possible to set up SSL for fusionauth directly? on Fri, 19 Jun 2020 23:08:18 GMT]]>Yes, you can configure SSL in Tomcat, but it is not recommended as we will replace the server.xml file during upgrades. So you'll need to merge any changes you've made with those we've made.

The best way to set it up will be to use nginx, or apache with TLS and proxy to FusionAuth.

]]>https://fusionauth.io/community/forum/post/447https://fusionauth.io/community/forum/post/447Fri, 19 Jun 2020 23:08:18 GMT