How to set `ssl_trusted_certificate` in nginx configuration file?

[kanluo458]

I use Mozilla SSL Configuration Generator(https://mozilla.github.io/server-side-tls/ssl-config-generator/) to generate a nginx configuration file.

There are three items about certificate,as follow :

ssl_certificate /path/to/signed_cert_plus_intermediates;
ssl_certificate_key /path/to/private_key;
ssl_trusted_certificate /path/to/root_CA_cert_plus_intermediates;

I use certbot(https://github.com/certbot/certbot) to apply certificate，but I can not find ssl_trusted_certificate,how to generate it ?

[sahsanu]

Hi @kanluo458,

ssl_certificate should point to fullchain.pem
ssl_certificate_key should point to privkey.pem
ssl_trusted_certificate should point to chain.pem

Cheers,
sahsanu