From 79da13ef6b0721640c2db9735bdd29ad4e35a64a Mon Sep 17 00:00:00 2001 From: Mohammed Al Sahaf Date: Wed, 24 Apr 2024 13:39:33 +0300 Subject: [PATCH] document `tls_trust_pool` in `reverse_proxy` directive --- src/docs/markdown/caddyfile/directives/reverse_proxy.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/docs/markdown/caddyfile/directives/reverse_proxy.md b/src/docs/markdown/caddyfile/directives/reverse_proxy.md index 380d250..25b025b 100644 --- a/src/docs/markdown/caddyfile/directives/reverse_proxy.md +++ b/src/docs/markdown/caddyfile/directives/reverse_proxy.md @@ -511,7 +511,7 @@ transport http { tls_insecure_skip_verify tls_curves tls_timeout - tls_trusted_ca_certs + tls_trust_pool tls_server_name tls_renegotiation tls_except_ports @@ -557,7 +557,7 @@ transport http { - **tls_timeout** is the maximum [duration](/docs/conventions#durations) to wait for the TLS handshake to complete. Default: No timeout. -- **tls_trusted_ca_certs** is a list of PEM files that specify CA public keys to trust when connecting to the backend. +- **tls_trust_pool** configures the source of trusted certificate authorities similar to the [`trust_pool` sub-directive](docs/caddyfile/directives/tls#trust_pool) described on the `tls` directive documentation. The list of trust pool sources available in standard Caddy installation is available [here](docs/caddyfile/directives/tls#trust-pool-providers). - **tls_server_name** sets the server name used when verifying the certificate received in the TLS handshake. By default, this will use the upstream address' host part.