From a9b65b7ce50eef9c2488acd2be85e0da7db85fc0 Mon Sep 17 00:00:00 2001 From: KOMATA <20227709+HynoR@users.noreply.github.com> Date: Thu, 26 Mar 2026 13:42:11 +0800 Subject: [PATCH] feat: add support for trusted SSL certificates in website proxy configuration (#12342) --- agent/app/service/website_proxy.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/agent/app/service/website_proxy.go b/agent/app/service/website_proxy.go index 3dc629cb2..601628029 100644 --- a/agent/app/service/website_proxy.go +++ b/agent/app/service/website_proxy.go @@ -117,8 +117,10 @@ func (w WebsiteService) OperateProxy(req request.WebsiteProxyConfig) (err error) applyLocationProxyPass(location, req.ProxyPass, &req.SNI, req.ProxySSLName) if isHTTPSProxyPass(req.ProxyPass) && req.SSLVerify { location.UpdateDirective("proxy_ssl_verify", []string{"on"}) + location.UpdateDirective("proxy_ssl_trusted_certificate", []string{"/etc/ssl/certs/ca-certificates.crt"}) } else { location.RemoveDirective("proxy_ssl_verify", []string{}) + location.RemoveDirective("proxy_ssl_trusted_certificate", []string{}) } location.UpdateDirective("proxy_set_header", []string{"Host", req.ProxyHost}) location.ChangePath(req.Modifier, req.Match)