diff --git a/apps/emqx/src/emqx_schema.erl b/apps/emqx/src/emqx_schema.erl index da8b885c6..9cac98d7a 100644 --- a/apps/emqx/src/emqx_schema.erl +++ b/apps/emqx/src/emqx_schema.erl @@ -2178,6 +2178,14 @@ common_ssl_opts_schema(Defaults, Type) -> desc => ?DESC(common_ssl_opts_schema_verify) } )}, + {"partial_chain", + sc( + hoconsc:enum([true, false, two_cacerts_from_cacertfile, cacert_from_cacertfile]), + #{ + default => Df(partial_chain, false), + desc => ?DESC(common_ssl_opts_schema_partial_chain) + } + )}, {"reuse_sessions", sc( boolean(), diff --git a/rel/i18n/emqx_schema.hocon b/rel/i18n/emqx_schema.hocon index e80f36817..7d5ac005f 100644 --- a/rel/i18n/emqx_schema.hocon +++ b/rel/i18n/emqx_schema.hocon @@ -684,6 +684,12 @@ common_ssl_opts_schema_verify.desc: common_ssl_opts_schema_verify.label: """Verify peer""" +common_ssl_opts_schema_partial_chain.desc: +"""Enable or disable peer verification with partial_chain""" + +common_ssl_opts_schema_partial_chain.label: +"""Partial chain""" + fields_listeners_ssl.desc: """SSL listeners."""