Skip to main content

TLS Custom Certificate Authority

  • Config File Key: tls_custom_ca or tls_custom_ca_file
  • Type: base64 encoded string or relative file location
  • Optional

TLS Custom Certificate Authority defines a set of root certificate authorities that the Pomerium Proxy Service uses when verifying upstream server certificates.

Note: This setting will replace (not append) the system's trust store for a given route.