# HTTPS listeners and outbound requests

*MuleSoft Developer II Study Guide · Secure data at rest and in transit · Last updated November 7, 2026 · https://www.certifyforce.com/study-guide/mulesoft-developer-ii/secure-data-at-rest-and-in-transit/https-listeners-and-outbound-requests*

Configure HTTPS at the listener and requester connection, respect runtime TLS restrictions, and distinguish handshake diagnosis from later HTTP-message defects.

- Certification: Salesforce MuleSoft Developer II
- Exam section: Secure data at rest and in transit
- Study guide: https://www.certifyforce.com/study-guide/mulesoft-developer-ii

**Official exam objective:**

> Expose and invoke APIs over HTTPS.

## What the exam expects

- Place HTTPS and TLS settings on the actual listener or requester connection.
- Choose valid TLS-context children and preserve their schema order.
- Reconcile application protocol and cipher restrictions with runtime configuration.
- Diagnose TLS negotiation separately from HTTP requests and responses.

Key terms: a **listener** accepts inbound requests; a **requester** calls a remote service; a **TLS context** groups transport-security configuration; a **cipher suite** describes negotiated cryptography; a **handshake** establishes the protected connection.

## Key facts

| Fact | Detail | Source |
|---|---|---|
| Inbound encryption | Select HTTPS on the listener connection. | [HTTP reference](https://raw.githubusercontent.com/mulesoft/docs-connectors/33276ccdb80668dd8bd45102a529a5fcc0918eea/http/1.9/modules/ROOT/pages/http-documentation.adoc) |
| Outbound default | An HTTPS host/path connection uses port 443 when omitted. | [HTTP reference](https://raw.githubusercontent.com/mulesoft/docs-connectors/33276ccdb80668dd8bd45102a529a5fcc0918eea/http/1.9/modules/ROOT/pages/http-documentation.adoc) |
| Declared context | Include at least one store child. | [TLS schema](https://github.com/mulesoft/mule/blob/f686c2d3f2ed5f3153e2ffa0a9702eab51082a14/runtime-extension-model/src/main/resources/META-INF/mule-tls.xsd) |
| Child ordering | Trust-store precedes key-store when both exist. | [TLS schema](https://github.com/mulesoft/mule/blob/f686c2d3f2ed5f3153e2ffa0a9702eab51082a14/runtime-extension-model/src/main/resources/META-INF/mule-tls.xsd) |
| Expression boundary | The applicable TLS parameters reject event expressions. | [TLS declaration](https://raw.githubusercontent.com/mulesoft/mule/b1e85bbba3d560241626a760140f26cccd2bc2ff/runtime-extension-model/src/main/java/org/mule/runtime/core/api/extension/provider/TlsExtensionModelDeclarer.java) |
| Runtime boundary | App selections can narrow globally permitted values. | [Mule TLS](https://docs.mulesoft.com/mule-runtime/4.6/tls-configuration) |
| Default selection | Global TLS configuration takes precedence over Java defaults. | [Mule TLS](https://docs.mulesoft.com/mule-runtime/4.6/tls-configuration) |
| Handshake evidence | `javax.net.debug=ssl` enables TLS diagnostics. | [Troubleshooting](https://raw.githubusercontent.com/mulesoft/docs-connectors/1ac74a44b0beb5816a7b4da3af251fc7ecb73f44/http/1.8/modules/ROOT/pages/http-troubleshooting.adoc) |

## Check yourself

- Why should the port-sensitive Host behavior be reported to the server owner?
- When can comparing a working client's raw messages help an HTTPS investigation?
- Which two configured values does HTTP Request use when generating Host?

## Sources

- [TLS Configuration, Mule 4.6](https://docs.mulesoft.com/mule-runtime/4.6/tls-configuration)
- [HTTP Connector 1.9 Reference](https://raw.githubusercontent.com/mulesoft/docs-connectors/33276ccdb80668dd8bd45102a529a5fcc0918eea/http/1.9/modules/ROOT/pages/http-documentation.adoc)
- [Mule 4.6 TLS schema](https://github.com/mulesoft/mule/blob/f686c2d3f2ed5f3153e2ffa0a9702eab51082a14/runtime-extension-model/src/main/resources/META-INF/mule-tls.xsd)
- [Static TLS parameter declaration](https://raw.githubusercontent.com/mulesoft/mule/b1e85bbba3d560241626a760140f26cccd2bc2ff/runtime-extension-model/src/main/java/org/mule/runtime/core/api/extension/provider/TlsExtensionModelDeclarer.java)
- [HTTP troubleshooting, baseline source](https://raw.githubusercontent.com/mulesoft/docs-connectors/1ac74a44b0beb5816a7b4da3af251fc7ecb73f44/http/1.8/modules/ROOT/pages/http-troubleshooting.adoc)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 12 linked practice questions, and unlimited timed mock exams are included with the MuleSoft Developer II pack (USD $19): https://www.certifyforce.com/practice-exams