@Test
    public void shouldSucceedWhenAllowedSelfSigned() {
        config.put(TLSOptions.TLS_TRUSTSTORE, getResourcePath("2waytest/basic_mutual_auth/gateway_ts.jks"));
        config.put(TLSOptions.TLS_TRUSTSTOREPASSWORD, "changeme");
        config.put(TLSOptions.TLS_KEYSTORE, getResourcePath("2waytest/basic_mutual_auth/gateway_ks.jks"));
        config.put(TLSOptions.TLS_KEYSTOREPASSWORD, "changeme");
        config.put(TLSOptions.TLS_KEYPASSWORD, "changeme");
        config.put(TLSOptions.TLS_ALLOWANYHOST, "true");
        config.put(TLSOptions.TLS_ALLOWSELFSIGNED, "true");

       HttpConnectorFactory factory = new HttpConnectorFactory(config);
       IApiConnector connector = factory.createConnector(request, api, RequiredAuthType.MTLS, false, new ConnectorConfigImpl());
       IApiConnection connection = connector.connect(request,
            (IAsyncResult<IApiConnectionResponse> result) -> {
                Assert.assertTrue(result.isSuccess());
            });

       connection.end();
    }
Scenario:
  - no CA inherited trust
  - gateway does not explicitly trust the API, but automatically validates against self-signed
  - API trusts gateway certificate
gateway/platforms/servlet/src/test/java/io/apiman/gateway/platforms/servlet/auth/tls/BasicMutualAuthTest.java