d mutual TLS certs</li></ol><p>Only then can you configure the external traffic to go through the egress gateway which will perform
TLS origination.</p><h3 id=generate-client-and-server-certificates-and-keys>Generate client and server certificates and keys</h3><p>For this task you can use your favorite tool to generate certificates and keys. The commands below use
<a href=https://man.openbsd.org/openssl.1>openssl</a></p><ol><li><p>Create a root certificate and private key to sign the certificate for your se