VirtualService with a HTTPS backend

Question

I have a service with a self signed SSL cert that I want to expose to the internet. I would like Istio Gateway to terminate the SSL connection (using a cert from cert-manage