Supplies the CA certificates to trust when validating a peer's certificate chain, given directly as PEM blocks instead of loading them from a truststore file. Each certificate can be a file/resource or inline PEM text.

 trust:
   certificates:
     - location: <file> | content: <PEM text>
     ...
   [ algorithm: <name> ]
   [ checkRevocation: <options> ]

Example Configuration

ssl:
   trust:
     certificates:
       - location: ca.pem

ssl:
   trust:
     certificates:
       - location: ca.pem

Syntax

trust:
  '$ref': <string>
  algorithm: <string>
  certificates:
    - <certificate>
  checkRevocation: <string>

trust:
  '$ref': <string>
  algorithm: <string>
  certificates:
    - <certificate>
  checkRevocation: <string>

Attributes

Name	Required	Default	Description	Examples
$ref	false	-	Reference a component defined under components.	-
algorithm	false	the JVM's default (usually `PKIX`)	Trust manager algorithm used to validate certificate chains.	-
checkRevocation	false	-	Comma-separated PKIX revocation checking options, from `java.security.cert.PKIXRevocationChecker.Option`: `ONLY_END_ENTITY`, `PREFER_CRLS`, `NO_FALLBACK`, `SOFT_FAIL`. Unset, no revocation checking (CRL/OCSP) is performed at all.	ONLY_END_ENTITY,SOFT_FAIL

Child Structure

Element	Cardinality	Description
certificate	0..*	The CA certificates to trust, each as its own PEM block either inline or loaded from a file.

Can be used in

components ssl