--- src/common/core/mtls/confs/server-stream/mtls.conf.orig 2026-09-21 08:05:39 UTC +++ src/common/core/mtls/confs/server-stream/mtls.conf @@ -11,8 +11,8 @@ {% endif %} {% elif verify_mode != "optional_no_ca" %} # No validated client CA bundle available yet for this stream server: mTLS points at a placeholder CA nothing can be validated against, so the verification directives stay in place instead of being dropped. Set MTLS_CA_CERTIFICATE or MTLS_CA_CERTIFICATE_DATA; the Scheduler validates the bundle and distributes it to every instance. -ssl_client_certificate /usr/share/bunkerweb/core/mtls/misc/placeholder-ca.pem; -ssl_trusted_certificate /usr/share/bunkerweb/core/mtls/misc/placeholder-ca.pem; +ssl_client_certificate /usr/local/share/bunkerweb/common/core/mtls/misc/placeholder-ca.pem; +ssl_trusted_certificate /usr/local/share/bunkerweb/common/core/mtls/misc/placeholder-ca.pem; {% endif %} ssl_verify_client {{ verify_mode }};