Proxy a TCP tls backend without passthrough

Traefik Traefik v2
1

I have third party tcp service with a self signed cert, I want to proxy it with tcp tls certResolver by HostSNI,
but from the traefik source code, it seems that the proxy didnot load any ca options