How to generate client certificates and key to test mTLS Authentication using OCI API Gateway?

Summary:

Hi All,

We need your expertise as we work to integrate with a webhook application that requires 2-Way SSL (mTLS) authentication for updates to our OIC endpoint. We’re deploying an API Gateway with mTLS in OCI to meet this requirement.

Before engaging with the external team, we want to complete local testing using Postman. However, we’re facing challenges due to limited documentation—especially since we are not using OCI Vault. We’re currently stuck at the Certificate Authorities step. Although we uploaded a CA Bundle and moved past that step, our Postman tests are failing with a 401 unauthorized error. The logs indicate that client certificates are not being sent, even though we are attaching them in Postman.