multiple client CAs

docs/03-server-config.adoc

@@ -20,7 +20,8 @@ tls:
     key: "server.p8.key"
   client:
     require: true
-    ca: "ca.crt"
+    cas:
+      - "ca.crt"
 
 compression:
   grpc:
@@ -40,7 +41,7 @@ It configures following:
 - compression is disabled for gRPC-server (enabled by default)
 - compression is disabled for upstream gRPC-client (enabled by default)
 - server certificate is located at `server.crt` with the key for it at `server.p8.key`
-- the server requires a client authentication by TLS client certificate signed by `ca.crt` certificate
+- the server requires a client authentication by TLS client certificate signed by `ca.crt` certificate.
 - no JSON RPC is configured
 - upstreams configuration is configured in the file `upstreams.yaml`
 

docs/08-authentication.adoc

@@ -180,15 +180,17 @@ tls:
 ----
 | Path to certificate and certificate private key
 
-a| `client.ca`, `client.required`
+a| `client.ca`, `client.cas`, `client.required`
 a|
 [source,yaml]
 ----
 tls:
   client:
-    ca: ca.crt
+    cas:
+      - ca1.crt
+      - ca2.crt
     required: true
 ----
-a| Path to CA used to authenticate incoming connections, used if `required: true`
+a| Paths to CA used to authenticate incoming connections, used if `required: true`
 
 |===