How do I add an upstream certificate for proxy chaining?

[mspublic]

Hello @zh-jq
We are trying to debug some issues with our environment. We would like to setup g3 as part of a proxy chain with the upstream proxy also doing MITM. But haven’t figured out how to configure g3 to trust the upstream rootCA. Your advice on how to configure this would be much appreciated.

thanks!

[zh-jq]

you can set tls interception client config in auditor like this:

tls_interception_client:
  ca_certificate: /path/to/cert.pem # or the pem string

or you can add that cert to the openssl trust store

[mspublic]

Thanks! We were doing it in tls_client.