k6 tlsAIAFetch retrieves missing TLS certificates
Introduced 2026-09-21 · score 0.96
HOW TO USE IT
If an HTTPS test fails because the server omits an intermediate certificate, set `tlsAIAFetch: true` in the k6 options to fetch it while verifying the TLS chain.
export const options = {
tlsAIAFetch: true,
};WHY THIS HELPS
When debugging an HTTPS test that fails because a server omits an intermediate certificate, configure k6 to fetch the missing certificate.
REQUIREMENTS AND LIMITATIONS
- Version: v2.3.0
- tlsAIAFetch: Boolean; defaults to `false`. When enabled, follows the certificate’s AIA extension to fetch missing intermediate CA certificates over HTTP. Has no effect when `insecureSkipTLSVerify` is enabled.
- Prerequisite: Introduced in k6 v2.3.0; opt-in.
- Opt-in; works with HTTP and gRPC connections.
FIRST-PARTY EVIDENCE
- https://github.com/grafana/k6/releases/tag/v2.3.0
- https://grafana.com/docs/k6/latest/using-k6/k6-options/reference/
Check the installed version and the source before using it. Entry JSON