---
name: Configure TLS on an HTTP server
---

Set the `tls` key to configure TLS. Both `key` and `cert` are required. The `key` should be the contents of your private key; `cert` should be the contents of your issued certificate. Use [`Bun.file()`](/docs/api/file-io#reading-files-bun-file) to read the contents.

```ts
const server = Bun.serve({
  fetch: (request) => new Response("Welcome to Bun!"),
  tls: {
    cert: Bun.file("cert.pem"),
    key: Bun.file("key.pem"),
  },
});
```

---

By default Bun trusts the default Mozilla-curated list of well-known root CAs. To override this list, pass an array of certificates as `ca`.

```ts
const server = Bun.serve({
  fetch: (request) => new Response("Welcome to Bun!"),
  tls: {
    cert: Bun.file("cert.pem"),
    key: Bun.file("key.pem"),
    ca: [Bun.file("ca1.pem"), Bun.file("ca2.pem")],
  },
});
```
Unnamed repository; edit this file 'description' to name the repository.</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/ansg191/v2/about/'>about</a><a href='/ansg191/v2/'>summary</a><a href='/ansg191/v2/refs/?id=9169fbafb2e07b33b2ca175c7ac4a9558280912c'>refs</a><a class='active' href='/ansg191/v2/log/vendor/golang.org/x/net/html?follow=1'>log</a><a href='/ansg191/v2/tree/vendor/golang.org/x/net/html?id=9169fbafb2e07b33b2ca175c7ac4a9558280912c'>tree</a><a href='/ansg191/v2/commit/vendor/golang.org/x/net/html?id=9169fbafb2e07b33b2ca175c7ac4a9558280912c&amp;follow=1'>commit</a><a href='/ansg191/v2/diff/vendor/golang.org/x/net/html?id=9169fbafb2e07b33b2ca175c7ac4a9558280912c&amp;follow=1'>diff</a></td><td class='form'><form class='right' method='get' action='/ansg191/v2/log/vendor/golang.org/x/net/html'>
<input type='hidden' name='id' value='9169fbafb2e07b33b2ca175c7ac4a9558280912c'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/ansg191/v2/log/?id=9169fbafb2e07b33b2ca175c7ac4a9558280912c&amp;follow=1'>root</a>/<a href='/ansg191/v2/log/vendor?id=9169fbafb2e07b33b2ca175c7ac4a9558280912c&amp;follow=1'>vendor</a>/<a href='/ansg191/v2/log/vendor/golang.org?id=9169fbafb2e07b33b2ca175c7ac4a9558280912c&amp;follow=1'>golang.org</a>/<a href='/ansg191/v2/log/vendor/golang.org/x?id=9169fbafb2e07b33b2ca175c7ac4a9558280912c&amp;follow=1'>x</a>/<a href='/ansg191/v2/log/vendor/golang.org/x/net?id=9169fbafb2e07b33b2ca175c7ac4a9558280912c&amp;follow=1'>net</a>/<a href='/ansg191/v2/log/vendor/golang.org/x/net/html?id=9169fbafb2e07b33b2ca175c7ac4a9558280912c&amp;follow=1'>html</a> (<a href='/ansg191/v2/log/vendor/golang.org/x/net/html?id=9169fbafb2e07b33b2ca175c7ac4a9558280912c'>unfollow</a>)</div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/ansg191/v2/log/vendor/golang.org/x/net/html?id=9169fbafb2e07b33b2ca175c7ac4a9558280912c&amp;showmsg=1&amp;follow=1'>Expand</a>)</th><th class='left'>Author</th><th class='left'>Files</th><th class='left'>Lines</th></tr>
<tr><td><span title='2018-08-26 09:46:00 -0700'>2018-08-26</span></td><td><a href='/ansg191/v2/commit/middleware/basic_auth.go?id=aae62aae08c7581822db0318dba21782d613b4bb&amp;follow=1'>Added remote client IP to API login failure error message.</a></td><td><img src='//www.gravatar.com/avatar/4fca794da0cf08804f99048d3c8b39c1?s=13&amp;d=retro' width='13' height='13' alt='Gravatar' /> dzaikos
</td><td>1</td><td><span class='deletions'>-2</span>/<span class='insertions'>+5</span></td></tr>
<tr><td><span title='2018-08-26 09:43:57 -0700'>2018-08-26</span></td><td><a href='/ansg191/v2/commit/locale/translations/de_DE.json?id=62ec185154385a178bf5525ed83682e5828942b0&amp;follow=1'>Add german translation string</a></td><td><img src='//www.gravatar.com/avatar/3b86b744453ccd501e2513d57578bfa9?s=13&amp;d=retro' width='13' height='13' alt='Gravatar' /> stratmaster
</td><td>2</td><td><span class='deletions'>-3</span>/<span class='insertions'>+5</span></td></tr>
<tr><td><span title='2018-08-25 12:21:54 -0700'>2018-08-25</span></td><td><a href='/ansg191/v2/commit/ui/static/js/confirm_handler.js?id=551b73acfb6ed4620387c7345b117d32697deb77&amp;follow=1'>Add remove button in feed edit page</a></td><td><img src='//www.gravatar.com/avatar/b2896c513e42a4573a23580a1278bf01?s=13&amp;d=retro' width='13' height='13' alt='Gravatar' /> Frédéric Guillot
</td><td>7</td><td><span class='deletions'>-10</span>/<span class='insertions'>+43</span></td></tr>
<tr><td><span title='2018-08-25 11:55:47 -0700'>2018-08-25</span></td><td><a href='/ansg191/v2/commit/tests/user_test.go?id=febce4f2e3a86da4171783fcc593b25a807c3da8&amp;follow=1'>Split integration tests into multiple files</a></td><td><img src='//www.gravatar.com/avatar/b2896c513e42a4573a23580a1278bf01?s=13&amp;d=retro' width='13' height='13' alt='Gravatar' /> Frédéric Guillot
</td><td>11</td><td><span class='deletions'>-1267</span>/<span class='insertions'>+1329</span></td></tr>
<tr><td><span title='2018-08-25 10:33:18 -0700'>2018-08-25</span></td><td><a href='/ansg191/v2/commit/reader/scraper/rules.go?id=df2bebaf3dc9ab46c03883d795ae6637faa4a2c1&amp;follow=1'>Update scraper rule for heise.de</a></td><td><img src='//www.gravatar.com/avatar/b2896c513e42a4573a23580a1278bf01?s=13&amp;d=retro' width='13' height='13' alt='Gravatar' /> Frédéric Guillot
</td><td>1</td><td><span class='deletions'>-1</span>/<span class='insertions'>+1</span></td></tr>
<tr><td><span title='2018-08-25 10:04:58 -0700'>2018-08-25</span></td><td><a href='/ansg191/v2/commit/api/user.go?id=b17e4e88f6f09a578be22d5a39cb47c8f14422ed&amp;follow=1'>Expose real error messages for internal server API errors</a></td><td><img src='//www.gravatar.com/avatar/b2896c513e42a4573a23580a1278bf01?s=13&amp;d=retro' width='13' height='13' alt='Gravatar' /> Frédéric Guillot
</td><td>6</td><td><span class='deletions'>-26</span>/<span class='insertions'>+25</span></td></tr>
<tr><td><span title='2018-08-25 09:50:43 -0700'>2018-08-25</span></td><td><a href='/ansg191/v2/commit/middleware/context_keys.go?id=c327833314fafd4accb9bbfbaf01f0dbee7a9a10&amp;follow=1'>Simplify context keys</a></td><td><img src='//www.gravatar.com/avatar/b2896c513e42a4573a23580a1278bf01?s=13&amp;d=retro' width='13' height='13' alt='Gravatar' /> Frédéric Guillot
</td><td>2</td><td><span class='deletions'>-50</span>/<span class='insertions'>+20</span></td></tr>
<tr><td><span title='2018-08-25 02:47:34 -0400'>2018-08-25</span></td><td><a href='/ansg191/v2/commit/ui/login_check.go?id=4148d8af80ba97b176568c2ac52ffce3721ddde0&amp;follow=1'>Added remote client IP to login failure error message.</a></td><td><img src='//www.gravatar.com/avatar/4fca794da0cf08804f99048d3c8b39c1?s=13&amp;d=retro' width='13' height='13' alt='Gravatar' /> dzaikos
</td><td>1</td><td><span class='deletions'>-2</span>/<span class='insertions'>+4</span></td></tr>
<tr><td><span title='2018-08-24 22:23:03 -0700'>2018-08-24</span></td><td><a href='/ansg191/v2/commit/vendor/github.com/miniflux/miniflux-go/doc.go?id=f43a055d63d33599404d2616bf54216bc74a2506&amp;follow=1'>Move Golang API client here</a></td><td><img src='//www.gravatar.com/avatar/b2896c513e42a4573a23580a1278bf01?s=13&amp;d=retro' width='13' height='13' alt='Gravatar' /> Frédéric Guillot
</td><td>12</td><td><span class='deletions'>-183</span>/<span class='insertions'>+132</span></td></tr>
<tr><td><span title='2018-08-24 21:56:39 -0700'>2018-08-24</span></td><td><a href='/ansg191/v2/commit/version/version.go?id=dbcc5d8a972f4f169e9e2c0636450555a06152b9&amp;follow=1'>Use canonical imports</a></td><td><img src='//www.gravatar.com/avatar/b2896c513e42a4573a23580a1278bf01?s=13&amp;d=retro' width='13' height='13' alt='Gravatar' /> Frédéric Guillot
</td><td>263</td><td><span class='deletions'>-956</span>/<span class='insertions'>+962</span></td></tr>