Skip to content

docs: fix TLS passthrough curl CA guidance and troubleshooting - #9778

Open
VedantMadane wants to merge 1 commit into
envoyproxy:mainfrom
VedantMadane:docs/tls-passthrough-cacert
Open

docs: fix TLS passthrough curl CA guidance and troubleshooting#9778
VedantMadane wants to merge 1 commit into
envoyproxy:mainfrom
VedantMadane:docs/tls-passthrough-cacert

Conversation

@VedantMadane

Copy link
Copy Markdown

Use the CA cert (not the leaf) with --cacert in both testing tabs, and add a short troubleshooting section for unable to get local issuer certificate under TLS passthrough.

Fixes #5630

@VedantMadane
VedantMadane requested a review from a team as a code owner August 18, 2026 16:40
@netlify

netlify Bot commented Aug 18, 2026

Copy link
Copy Markdown

Deploy Preview for cerulean-figolla-1f9435 ready!

Name Link
🔨 Latest commit 8430ba5
🔍 Latest deploy log https://app.netlify.com/projects/cerulean-figolla-1f9435/deploys/6a8690ddbc556e0008883f80
😎 Deploy Preview https://deploy-preview-9778--cerulean-figolla-1f9435.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a52e86ca1f

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread site/content/en/latest/tasks/security/tls-passthrough.md
Comment thread site/content/en/latest/tasks/security/tls-passthrough.md Outdated
@VedantMadane

Copy link
Copy Markdown
Author

Addressed the review notes: qualified the leaf-as---cacert guidance as backend-dependent (CA remains the portable recommendation), and added a rollout restart + status wait after replacing the sample server-certs Secret so the echoserver reloads the keypair.

@zirain

zirain commented Aug 19, 2026

Copy link
Copy Markdown
Member

@codex review

@zirain

zirain commented Aug 19, 2026

Copy link
Copy Markdown
Member

please fix DCO

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 644c32475c

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread site/content/en/latest/tasks/security/tls-passthrough.md Outdated
Use the CA cert (not the leaf) with `--cacert` in both testing tabs,
qualify leaf trust behavior, add guidance for public/private CA trust
anchors, and add troubleshooting section for `unable to get local issuer
certificate` under TLS passthrough.

Fixes envoyproxy#5630

Signed-off-by: Vedant Madane <vedantnm@gmail.com>
@VedantMadane
VedantMadane force-pushed the docs/tls-passthrough-cacert branch from 1bbe99f to 8430ba5 Compare August 20, 2026 05:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

docs: TLS Passthrough - SSL Certificate Issue

2 participants