From f738ea5e2244f09f2de0c0bc6f752e6ebad8fbab Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E4=B8=96=E7=95=8C?= <i@sekai.icu>
Date: Thu, 30 Jan 2025 14:27:25 +0800
Subject: [PATCH] documentation: Certificate store

---
 docs/configuration/certificate/index.md | 54 +++++++++++++++++++++++++
 mkdocs.yml                              |  4 +-
 2 files changed, 56 insertions(+), 2 deletions(-)
 create mode 100644 docs/configuration/certificate/index.md

diff --git a/docs/configuration/certificate/index.md b/docs/configuration/certificate/index.md
new file mode 100644
index 00000000..698fec70
--- /dev/null
+++ b/docs/configuration/certificate/index.md
@@ -0,0 +1,54 @@
+---
+icon: material/new-box
+---
+
+!!! question "Since sing-box 1.12.0"
+
+# Certificate
+
+### Structure
+
+```json
+{
+  "store": "",
+  "certificate": [],
+  "certificate_path": [],
+  "certificate_directory_path": []
+}
+```
+
+!!! note ""
+
+    You can ignore the JSON Array [] tag when the content is only one item
+
+### Fields
+
+#### store
+
+The default X509 trusted CA certificate list.
+
+| Type               | Description                                                                                                   |
+|--------------------|---------------------------------------------------------------------------------------------------------------|
+| `system` (default) | System trusted CA certificates                                                                                |
+| `mozilla`          | [Mozilla Included List](https://wiki.mozilla.org/CA/Included_Certificates) with China CA certificates removed |
+| `none`             | Empty list                                                                                                    |
+
+#### certificate
+
+The certificate line array to trust, in PEM format.
+
+#### certificate_path
+
+!!! note ""
+
+    Will be automatically reloaded if file modified.
+
+The paths to certificates to trust, in PEM format.
+
+#### certificate_directory_path
+
+!!! note ""
+
+    Will be automatically reloaded if file modified.
+
+The directory path to search for certificates to trust,in PEM format.
diff --git a/mkdocs.yml b/mkdocs.yml
index acab5853..5758525a 100644
--- a/mkdocs.yml
+++ b/mkdocs.yml
@@ -96,8 +96,8 @@ nav:
           - DNS Rule: configuration/dns/rule.md
           - DNS Rule Action: configuration/dns/rule_action.md
           - FakeIP: configuration/dns/fakeip.md
-      - NTP:
-          - configuration/ntp/index.md
+      - NTP: configuration/ntp/index.md
+      - Certificate: configuration/certificate/index.md
       - Route:
           - configuration/route/index.md
           - GeoIP: configuration/route/geoip.md