TLS Custom Certificate Authority
Summary
TLS Custom Certificate Authority defines a set of root certificate authorities that the Pomerium Proxy Service uses when verifying upstream server certificates.
Note: This setting will replace (not append) the system's trust store for a given route.
How to configure
- Core
- Enterprise
- Kubernetes
| YAML/JSON setting | Type | Usage |
|---|---|---|
tls_custom_ca or tls_custom_ca_file | string | optional |
Set TLS Custom Certificate Authority in the Console:
See Kubernetes TLS Certificates for more information
Examples
tls_custom_ca: base64-encoded-custom-ca
tls_custom_ca_file: /relative/file/location