-
Notifications
You must be signed in to change notification settings - Fork 29.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Extendable ca certs v6 #9770
Extendable ca certs v6 #9770
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Thanks for the reviews. For the info of any watchers - we are waiting on LTS agenda before this can be landed. If it impacts you with v4 or v6, comment on #9139 . |
9ba05a3
to
de42b88
Compare
@nodejs/lts ... any objections to getting this landed in v6.x-staging? |
+1 from me and I think it was agreed in the latest LTS meeting that it will go out in the next semver minor release. |
PR-URL: nodejs#9139 Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl> Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com>
In closed environments, self-signed or privately signed certificates are commonly used, and rejected by Node.js since their root CAs are not well-known. Allow extending the set of well-known compiled-in CAs via environment, so they can be set as a matter of policy. PR-URL: nodejs#9139 Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl> Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com>
de42b88
to
dc1bb52
Compare
@nodejs/build Any idea why tes/arm shows up as failed in CI above, but not in jenkins, https://ci.nodejs.org/job/node-test-commit-arm/7007/? I rebased onto v6.x-staging, anything ele I need to do here? |
@sam-github not an issue: nodejs/build#572 |
ping @sam-github |
pong @italoacasas |
@MylesBorins do I push this onto v6.x-staging, or does the 6.x maintainer pull it on? |
After the last round of audits on v6.x the original PR can now be cherry-picked onto the v6.x-staging branch with the test suite passing! closing |
Backport of #9139 to v6 to resolve conflicts.
Checklist
make -j8 test
(UNIX), orvcbuild test nosign
(Windows) passesAffected core subsystem(s)
tls,https