What's the recommended way to trust the self-signed cert used in the Integration API

Packaging a Classic Application
1

The Replicated Integration API is helpful to get the license info and more, but it’s served with a self-sign cert.

Our application code can access $INTEGRATION_API/license/v1/license to request the license data, but should we trust any self-signed cert? Do you have any recommendations on how we can ensure that we are connected to the right endpoint?

2

You can access the CA that Replicated uses to sign the certificate for the Integration API with the template function {{repl ConsoleSetting "tls.authority.cert"}}.