QudoSSL Migration Demo

Spring Boot Application — Baseline — stock OpenSSL

How this demo is wired

Browser / curl TLS client HTTPS · TLS 1.3 classical key exchange NGINX stock image — distribution OpenSSL 3.0 Baseline — stock OpenSSL TLS terminates here HTTP port 8080 Spring Boot this application The migration will happen here — and only here one configuration line, plus an NGINX binary built against QudoSSL never speaks TLS unchanged

Post-quantum protection comes from the key exchange (ML-KEM hybrid), not the certificate — that is what defends against “harvest now, decrypt later”. The certificate stays classical RSA. Active configuration: Baseline — stock OpenSSL 3.0, classical key exchange only (no ML-KEM).

This application

Application
QudoSSL NGINX Migration Demo
Backend
Spring Boot
TLS Termination
NGINX
Backend Protocol
HTTP
TLS Stack
Baseline — stock OpenSSL
Status
UP
/health /info