Document update SSL support

Add a new SSL section to the reference documentation to describe SSL
bundles.

See gh-34814

spring-boot-project/spring-boot-docs/src/docs/asciidoc/features.adoc

@@ -30,4 +30,6 @@ include::features/developing-auto-configuration.adoc[]
 
 include::features/kotlin.adoc[]
 
+include::features/ssl.adoc[]
+
 include::features/whats-next.adoc[]

spring-boot-project/spring-boot-docs/src/docs/asciidoc/features/ssl.adoc

@@ -0,0 +1,99 @@
+[[features.ssl]]
+== SSL
+Spring Boot provides the ability to configure SSL trust material that can be applied to several types of connections in order to support secure communications.
+Configuration properties with the prefix `spring.ssl.bundle` can be used to specify named sets of trust material and associated information.
+
+
+
+[[features.ssl.jks]]
+=== Configuring SSL With Java KeyStore Files
+Configuration properties with the prefix `spring.ssl.bundle.jks` can be used to configure bundles of trust material created with the Java `keytool` utility and stored in Java KeyStore files in the JKS or PKCS12 format.
+Each bundle has a user-provided name that can be used to reference the bundle.
+
+When used to secure an embedded web server, a `keystore` is typically configured with a Java KeyStore containing a certificate and private key as shown in this example:
+
+[source,yaml,indent=0,subs="verbatim",configblocks]
+----
+    spring:
+      ssl:
+        bundle:
+          jks:
+            mybundle:
+              key:
+                alias: "application"
+              keystore:
+                location: "classpath:application.p12"
+                password: "secret"
+                type: "PKCS12"
+----
+
+When used to secure a client-side connection, a `truststore` is typically configured with a Java KeyStore containing the server certificate as shown in this example:
+
+[source,yaml,indent=0,subs="verbatim",configblocks]
+----
+    spring:
+      ssl:
+        bundle:
+          jks:
+            mybundle:
+              truststore:
+                location: "classpath:server.p12"
+                password: "secret"
+----
+
+See {spring-boot-autoconfigure-module-code}/ssl/JksSslBundleProperties.java[JksSslBundleProperties] for the full set of supported properties.
+
+
+
+[[features.ssl.pem]]
+=== Configuring SSL With PEM-encoded Certificates
+Configuration properties with the prefix `spring.ssl.bundle.pem` can be used to configure bundles of trust material in the form of PEM-encoded text.
+Each bundle has a user-provided name that can be used to reference the bundle.
+
+When used to secure an embedded web server, a `keystore` is typically configured with a certificate and private key as shown in this example:
+
+[source,yaml,indent=0,subs="verbatim",configblocks]
+----
+    spring:
+      ssl:
+        bundle:
+          pem:
+            mybundle:
+              keystore:
+                certificate: "classpath:application.crt"
+                private-key: "classpath:application.key"
+----
+
+When used to secure an embedded web server, a `truststore` is typically configured with the server certificate as shown in this example:
+
+[source,yaml,indent=0,subs="verbatim",configblocks]
+----
+    spring:
+      ssl:
+        bundle:
+          pem:
+            mybundle:
+              truststore:
+                certificate: "classpath:server.crt"
+----
+
+See {spring-boot-autoconfigure-module-code}/ssl/PemSslBundleProperties.java[PemSslBundleProperties] for the full set of supported properties.
+
+
+
+[[features.ssl.applying]]
+=== Applying SSL Bundles
+Once configured using properties, SSL bundles can be referred to by name in configuration properties for various types of connections that are auto-configured by Spring Boot.
+See the sections on <<howto#howto.webserver.configure-ssl,embedded web servers>> and <<data#data,data technologies>> for further information.
+
+
+
+[[features.ssl.bundles]]
+=== Using SSL Bundles
+Spring Boot auto-configures a bean of type `SslBundles` that provides access to each of the named bundles configured using the `spring.ssl.bundle` properties.
+An `SslBundle` can be retrieved from the auto-configured `SslBundles` bean and used to create a `javax.net.ssl.SSLContext` or objects of other types from the `java.net.ssl` package that are typically used to configure SSL connectivity in other APIs.
+
+The following example shows retrieving an `SslBundle` and using it to create an `SSLContext`:
+
+include::code:MyComponent[]
+

spring-boot-project/spring-boot-docs/src/docs/asciidoc/howto/webserver.adoc

@@ -207,6 +207,16 @@ The following example shows setting SSL properties using PEM-encoded certificate
 	    trust-certificate: "classpath:ca-cert.crt"
 ----
 
+Alternatively, the SSL trust material can be configured in an <<features#features.ssl,SSL bundle>> and applied to the web server as shown in this example:
+
+[source,yaml,indent=0,subs="verbatim",configprops,configblocks]
+----
+	server:
+	  port: 8443
+	  ssl:
+	    bundle: "example"
+----
+
 See {spring-boot-module-code}/web/server/Ssl.java[`Ssl`] for details of all of the supported properties.
 
 Using configuration such as the preceding example means the application no longer supports a plain HTTP connector at port 8080.