Skip to main content
Envoy Docs
1.40.0-dev-17142apre ▾
1.40.0-dev-17142a All versions
GitHub
esc
↑↓navigate ↵open
Documentation
  • About the documentation
  • Introduction
  • Getting Started
  • Configuration reference
  • Operations and administration
  • Extending Envoy for custom use cases
  • API
    • Supported API versions
    • v3 API reference
      • Bootstrap
      • Listeners
      • Clusters
      • HTTP route management
      • Extensions
        • Access log extension filters
        • Access log formatters
        • Access loggers
        • Certificate mappers
        • Certificate selectors
        • Certificate validators
        • Cluster
        • Common
        • Compression
        • Config validators
        • Content parsers
        • Contrib extensions
        • DNS resolver
        • Endpoint
        • Filters
        • Grpc credentials
        • Health check event sinks
        • Health checkers
        • HTTP early header mutation
        • HttpCacheV2 cache implementations
        • Custom response policies
        • External Processing Extensions
        • HTTP header formatters
        • HTTP header validators
        • HTTP original IP detection
        • HTTP stateful session
        • Injected credentials
        • Geolocation providers
        • HTTP tracers
        • Internal redirect predicates
        • Path matcher
        • Path rewriter
        • Quic extensions
        • Rate limit descriptors
        • RBAC
        • RBAC matchers
        • RBAC principals
        • Request ID
        • Resource monitors
        • Retry predicates
        • Stat sinks
        • String Matcher
        • Transport sockets
        • Upstream configuration
        • WASM
        • Watchdog
        • Load balancing policies
        • Queue policies
        • Cluster specifier
        • Local address selectors
      • Admin
      • Envoy data
      • Services
      • Common messages
      • Common messages (XDS)
      • Types
    • xDS REST and gRPC protocol
    • Well Known Client Features
  • FAQ
  • Version history
  • API
  • v3 API reference
  • Extensions
  • Certificate mappers
  • View page source

Certificate mappers

These extensions allow mapping a peer handshake message to a TLS certificate secret resource.

  • Filter state certificate mapper (proto)
    • extensions.transport_sockets.tls.cert_mappers.filter_state_override.v3.Config
  • SNI certificate mapper (proto)
    • extensions.transport_sockets.tls.cert_mappers.sni.v3.SNI
  • Static secret certificate mapper (proto)
    • extensions.transport_sockets.tls.cert_mappers.static_name.v3.StaticName
Previous Next

© Copyright 2016-2026, Envoy Project Authors.

Built with Sphinx using a theme provided by Read the Docs.
On this page
  • Certificate mappers