From b378f2e9ac881ff7c658efe0002a396078a09efe Mon Sep 17 00:00:00 2001
From: Jonathan Hess <hessjc@google.com>
Date: Tue, 17 Dec 2024 13:06:26 -0700
Subject: [PATCH] feat: Support Private CA for server certificates.

---
 src/socket.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/socket.ts b/src/socket.ts
index 6c757ad4..a408ea86 100644
--- a/src/socket.ts
+++ b/src/socket.ts
@@ -36,7 +36,8 @@ export function validateCertificate(
   dnsName: string
 ) {
   return (hostname: string, cert: tls.PeerCertificate): Error | undefined => {
-    if (serverCaMode === 'GOOGLE_MANAGED_CAS_CA') {
+    if (serverCaMode === 'GOOGLE_MANAGED_CAS_CA'
+      || serverCaMode === 'CUSTOMER_MANAGED_CAS_CA') {
       return tls.checkServerIdentity(dnsName, cert);
     }
     if (!cert || !cert.subject) {