From 1277cb2d8fccb494bac6ef79928d77e2dae2dc9d Mon Sep 17 00:00:00 2001 From: HynoR <20227709+HynoR@users.noreply.github.com> Date: Wed, 25 Mar 2026 18:42:11 +0800 Subject: [PATCH] feat: add support for trusted SSL certificates in website proxy configuration --- agent/app/service/website_proxy.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/agent/app/service/website_proxy.go b/agent/app/service/website_proxy.go index 3dc629cb2d2f..6016280299c4 100644 --- a/agent/app/service/website_proxy.go +++ b/agent/app/service/website_proxy.go @@ -117,8 +117,10 @@ func (w WebsiteService) OperateProxy(req request.WebsiteProxyConfig) (err error) applyLocationProxyPass(location, req.ProxyPass, &req.SNI, req.ProxySSLName) if isHTTPSProxyPass(req.ProxyPass) && req.SSLVerify { location.UpdateDirective("proxy_ssl_verify", []string{"on"}) + location.UpdateDirective("proxy_ssl_trusted_certificate", []string{"/etc/ssl/certs/ca-certificates.crt"}) } else { location.RemoveDirective("proxy_ssl_verify", []string{}) + location.RemoveDirective("proxy_ssl_trusted_certificate", []string{}) } location.UpdateDirective("proxy_set_header", []string{"Host", req.ProxyHost}) location.ChangePath(req.Modifier, req.Match)