...
General TLS configurations:
One-way TLS. - Only the client verifies the server’s certificate.
Two-way Mutual TLS (mTLS). - Both the client and the server authenticate each other’s certificates.
...
verify_peer
- Ensures that the server's certificate is valid and trusted by verifying it against a Certificate Authority (CA).verify_host
- Ensures that the server's certificate is specifically intended for the hostname you are connecting to.ca_file
- Optional, if you need to specify the path to a customcafile
CA File.cert
- For mTLS, the client is required to provide a certificate to be verified by the server.key
- For mTLS, the client is required to use a private key to provide a signature proving that the client has the private key associated with the public certificate it presents.
...