Terraform Version

Currently the only way to use an own http Backend with an own PKI infrastructure is to use the Option.

skip_cert_verification

Use Cases

http Backend with an own PKI infrastructure (for example in Air Gapped environments)

Attempted Solutions

Review Code and Documentation:

• https://github.com/hashicorp/terraform/blob/main/internal/backend/remote-state/http/backend.go
• https://www.terraform.io/docs/backends/types/http.html

Proposal

It would be nicer, if we could add a CA Certificate like:

terraform {
  backend "http" {
    address = "http://myrest.api.com/foo"
    lock_address = "http://myrest.api.com/foo"
    unlock_address = "http://myrest.api.com/foo"
    ca_file = "/path/to/my/ca.pem"
  }
}

References

Issue Found for mTLS: #21087 and #31699 but no issues found for just the ca_certificate