Skip to content

Commit eca3c65

Browse files
authored
remove section mentioning the CLIs host mode (#322)
1 parent 9647011 commit eca3c65

File tree

1 file changed

+3
-46
lines changed

1 file changed

+3
-46
lines changed

src/content/docs/aws/capabilities/security-testing/custom-tls-certificates.mdx

Lines changed: 3 additions & 46 deletions
Original file line numberDiff line numberDiff line change
@@ -16,11 +16,10 @@ This requires that LocalStack is able to access public URLs.
1616
If there is a proxy server in your network that uses a non-standard TLS certificate, LocalStack will not be able to download any files on demand.
1717
You may see errors in the logs relating to TLS such as "unable to get local issuer certificate".
1818

19-
There are three options when running LocalStack:
19+
There are two options when running LocalStack:
2020

21-
1. [creating a custom Docker image](#creating-a-custom-docker-image),
22-
2. [using init hooks](#custom-tls-certificates-with-init-hooks) or
23-
3. [when running in host mode](#custom-tls-certificates-with-host-mode).
21+
1. [creating a custom Docker image](#creating-a-custom-docker-image) or
22+
2. [using init hooks](#custom-tls-certificates-with-init-hooks)
2423

2524
They all can be summarised as:
2625

@@ -108,45 +107,3 @@ Then run LocalStack with the environment variables
108107
* `NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt`
109108

110109
and follow the instructions fn the [init hooks documentation](/aws/capabilities/config/initialization-hooks) for configuring LocalStack to use the hook directory as a `boot` hook.
111-
112-
## Custom TLS certificates with host mode
113-
114-
### Linux
115-
116-
On linux the custom certificate should be added to your `ca-certificates` bundle.
117-
For example on Debian based systems (as root):
118-
119-
```bash
120-
# cp <your custom certificate.crt> /usr/local/share/ca-certificates
121-
122-
# update-ca-certificates
123-
124-
```
125-
126-
Then run LocalStack with the environment variables `REQUESTS_CA_BUNDLE`, `CURL_CA_BUNDLE`, and `NODE_EXTRA_CA_CERTS``:
127-
128-
```bash
129-
NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt \
130-
CURL_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt \
131-
REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt \
132-
localstack start --host
133-
```
134-
135-
### macOS
136-
137-
On macOS the custom certificate should be added to your keychain.
138-
See [this Apple support article](https://support.apple.com/en-gb/guide/keychain-access/kyca2431/mac) for more information.
139-
140-
Then run LocalStack with the environment variables `REQUESTS_CA_BUNDLE`, `CURL_CA_BUNDLE`, and `NODE_EXTRA_CA_CERTS``:
141-
142-
```bash
143-
NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt \
144-
CURL_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt \
145-
REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt \
146-
localstack start --host
147-
```
148-
149-
### Windows
150-
151-
Currently host mode does not work with Windows.
152-
If you are using WSL2 you should follow the [Linux](#linux) steps above.

0 commit comments

Comments
 (0)