TLS & certificates

Impostor uses rustls for a clean TLS and mutual-TLS story. You can trust custom CAs and present client certificates per request or folder.

Custom Certificate Authorities

If you are working with self-signed servers or internal enterprise endpoints, you can add a custom CA certificate (in PEM format) to instruct Impostor to trust your server.

Client mTLS

Impostor fully supports mutual TLS (mTLS). You can supply your client identity either as a PEM certificate paired with a PKCS#8 key, or as a bundled PKCS#12 (.p12 or .pfx) file.

Insecure connections

For testing environments where certificate validation is not feasible, you can toggle the insecureSkipVerify option to bypass standard TLS checks. Note that this option is currently not supported for gRPC requests.