Refer to Mutual Authentication to create server certificates and CA certificates. Generally, only backend servers need to be authenticated. You only need to configure server certificates.