��书对客户端进行校验，因此需要使用 <code>cacert</code> 字段来保存 CA 证书：</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl -n istio-system delete secret httpbin-credential
$ kubectl create -n istio-system secret generic httpbin-credential  \
--from-file=key=httpbin.example.com/3_application/private/httpbin.example.com.key.pem \
--from-file=cert=httpbin.example.com/3_application/certs/httpbin.example.com.cert.pem \
--from-file=cacert=httpbin.example.