'trusted_ca_cert_file' field is deprecated - what code to write instead?

I have this code:

:8080 {
	tls /etc/certs/server.crt /etc/certs/server.key {
		client_auth {
			mode require_and_verify
			trusted_ca_cert_file /etc/certs/ca.crt
		}
	}
}

which gives a deprecation warning:

"The 'trusted_ca_cert_file' field is deprecated. Use the 'trust_pool' field instead."

I’ve consulted the documentation
which says I need to specify trust_pool <module>
but it doesn’t really make sense to me.

Can you give an example?

Did you read the docs?

1 Like

It wasn’t making sense to me, but I got it now:

tls /etc/certs/server.crt /etc/certs/server.key {
  client_auth {
    trust_pool file /etc/certs/ca.crt
  }
}

reverse_proxy {
  transport http {
    tls_trust_pool file /etc/certs/ca.crt
  }
}
1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.