-
-
Notifications
You must be signed in to change notification settings - Fork 31.6k
Extendable ca certs v6 #9770
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
Extendable ca certs v6 #9770
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Thanks for the reviews. For the info of any watchers - we are waiting on LTS agenda before this can be landed. If it impacts you with v4 or v6, comment on #9139 . |
9ba05a3
to
de42b88
Compare
@nodejs/lts ... any objections to getting this landed in v6.x-staging? |
+1 from me and I think it was agreed in the latest LTS meeting that it will go out in the next semver minor release. |
PR-URL: nodejs#9139 Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl> Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com>
In closed environments, self-signed or privately signed certificates are commonly used, and rejected by Node.js since their root CAs are not well-known. Allow extending the set of well-known compiled-in CAs via environment, so they can be set as a matter of policy. PR-URL: nodejs#9139 Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl> Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com>
de42b88
to
dc1bb52
Compare
@nodejs/build Any idea why tes/arm shows up as failed in CI above, but not in jenkins, https://ci.nodejs.org/job/node-test-commit-arm/7007/? I rebased onto v6.x-staging, anything ele I need to do here? |
@sam-github not an issue: nodejs/build#572 |
ping @sam-github |
pong @italoacasas |
@MylesBorins do I push this onto v6.x-staging, or does the 6.x maintainer pull it on? |
After the last round of audits on v6.x the original PR can now be cherry-picked onto the v6.x-staging branch with the test suite passing! closing |
Backport of #9139 to v6 to resolve conflicts.
Checklist
make -j8 test
(UNIX), orvcbuild test nosign
(Windows) passesAffected core subsystem(s)
tls,https