Skip to content

feat(connectors): support custom CA certificates for MCP servers - #1709

Open
hyy829119 wants to merge 1 commit into
TencentCloud:developfrom
hyy829119:huayao
Open

hyy829119 wants to merge 1 commit into
TencentCloud:developfrom
hyy829119:huayao

Conversation

@hyy829119

@hyy829119 hyy829119 commented Oct 6, 2026 •

Copy link
Copy Markdown

Summary

Add optional certificate uploads for custom HTTPS MCP servers that use self-signed certificates or private CAs.

  • Store certificates in encrypted connector credentials.
  • Use connector-specific trust for connection tests and runtime MCP calls while preserving hostname and certificate validity checks.
  • Surface underlying TLS and network errors instead of generic task-group errors.
  • Add regression coverage for certificate uploads, persistence, and TLS verification.

Target branch

  • Base is develop (feature / fix — default)
  • Base is main (release/* or hotfix/* only)

Type of change

  • Bug fix
  • New feature
  • Breaking change
  • Documentation
  • Refactor / chore
  • Release / hotfix

Test plan

  • Focused backend and localization tests: 156 passed.

  • Frontend certificate configuration tests: 6 passed.

  • make build-frontend passed, including TypeScript checking.

  • Linux make all PYTEST_JOBS=2: 4,476 passed, 16 skipped.

  • macOS make all PYTEST_JOBS=4: 4,472 passed, 18 skipped, 2 failed. Both failures are existing fnOS tests that require Linux process information.

  • make all passes locally (Linux)

  • Added/updated tests

Checklist

  • Updated CHANGELOG.md (if user-facing)
  • README / docs updated (if needed)

No README or documentation changes are required.

@hyy829119 hyy829119 left a comment

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1

- Add optional certificate uploads for self-signed and private CA HTTPS servers
- Store certificates in encrypted connector credentials
- Apply custom trust to both connection tests and runtime MCP calls
- Preserve hostname and certificate validity checks
- Improve TLS error messages and add regression tests
@hyy829119
hyy829119 changed the base branch from main to develop October 8, 2026 14:58

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant