ExIcaoVds.TrustResolvers.FileCertificateStore (ex_icao_vds v0.3.2)

Copy Markdown

Trust resolver that loads X.509 certificates from PEM files on disk.

Config / opts

%{
  backend: ExIcaoVds.TrustResolvers.FileCertificateStore,
  trust_mode: :x509,
  cert_store_path: "/etc/ex_icao_vds/certs"
}

Expected directory layout:

<cert_store_path>/<signer_identifier>.pem

Each file must contain one or more PEM-encoded X.509 certificates. The first certificate is treated as the signer certificate; any additional certificates are treated as the chain.