velSettings:
      - port:
          number: 443
        tls:
          mode: SIMPLE
          clientCertificate: /etc/certs/myclientcert.pem
          privateKey: /etc/certs/client_private_key.pem
          sni: my-nginx.mesh-external.svc.cluster.local
          # caCertificates not set</code></pre><p>In this example, the destination rule <code>db-tls</code> specifies
TLS, but does not set the CA certificate file.</p><h2 id=how-to-resolve>How to resolve</h2><ul><li>Supply the filename of a CA certificate</