feat：根证书导入增加指纹白名单校验

2026-05-06 15:58:16 +08:00
parent 8287289167
commit 855ea1247b
6 changed files with 137 additions and 0 deletions
@@ -41,6 +41,10 @@ tms:
    storage:
      upload-base-dir: /home/tms/uploads
      max-file-size-bytes: 104857600
+  cert:
+    # 允许导入为根 CA 信任锚的 SHA-256 指纹白名单。为空表示不限制；生产建议填写线下确认的根 CA 指纹。
+    trusted-root-fingerprints:
+      - ""
  init:
    executor:
      mode: LOCAL