import ballerina/http;

// An HTTP listener can be configured to communicate through HTTPS as well.
// To secure a listener using HTTPS, the listener needs to be configured with
// a certificate file and a private key file for the listener.
// The [`http:ListenerSecureSocket`](https://docs.central.ballerina.io/ballerina/http/latest/records/ListenerSecureSocket) record
// provides the SSL-related listener configurations of the listener.
listener http:Listener securedEP = new(9090,
    secureSocket = {
        key: {
            certFile: "../resource/path/to/public.crt",
            keyFile: "../resource/path/to/private.key"
        }
    }
);

service /foo on securedEP {
    resource function get bar() returns string {
        return "Hello, World!";
    }
}

Service - SSL/TLS

You can use the HTTPS listener to connect to or interact with an HTTPS client. Provide the http:ListenerSecureSocket configurations to the server to expose an HTTPS connection.

For more information on the underlying module, see the HTTP module.

 
import ballerina/http;

listener http:Listener securedEP = new(9090,
    secureSocket = {
        key: {
            certFile: "../resource/path/to/public.crt",
            keyFile: "../resource/path/to/private.key"
        }
    }
);

An HTTP listener can be configured to communicate through HTTPS as well. To secure a listener using HTTPS, the listener needs to be configured with a certificate file and a private key file for the listener. The http:ListenerSecureSocket record provides the SSL-related listener configurations of the listener.

service /foo on securedEP {
    resource function get bar() returns string {
        return "Hello, World!";
    }
}

# You may need to change the certificate file path and private key file path.
bal run http_service_ssl_tls.bal

# To invoke the service, use the cURL commands below.
curl https://localhost:9090/foo/bar --cacert /path/to/server-public.crt