diff --git a/doc/api/tls.md b/doc/api/tls.md index 867681d1d2a626..9bd0447a1bcb17 100644 --- a/doc/api/tls.md +++ b/doc/api/tls.md @@ -1384,6 +1384,7 @@ changes: provided. For PEM encoded certificates, supported types are "TRUSTED CERTIFICATE", "X509 CERTIFICATE", and "CERTIFICATE". + See also [`tls.rootCertificates`]. * `cert` {string|string[]|Buffer|Buffer[]} Cert chains in PEM format. One cert chain should be provided per private key. Each cert chain should consist of the PEM formatted certificate for a provided private `key`, followed by the @@ -1594,6 +1595,17 @@ TLSv1.2 and below. console.log(tls.getCiphers()); // ['aes128-gcm-sha256', 'aes128-sha', ...] ``` +## tls.rootCertificates + + +* {string[]} + +An immutable array of strings representing the root certificates (in PEM format) +used for verifying peer certificates. This is the default value of the `ca` +option to [`tls.createSecureContext()`]. + ## tls.DEFAULT_ECDH_CURVE