GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — crypto: Use system CAs instead of using bundled ones · nodejs/node@fd9bb56

File tree

Expand file treeCollapse file tree
Open diff view settings
Filter options
  • configure
  • src
    • node_crypto.cc
Expand file treeCollapse file tree
Open diff view settings
Collapse file

‎configure‎

Copy file name to clipboardExpand all lines: configure
+7Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -153,6 +153,11 @@ parser.add_option('--openssl-fips',
153153
dest='openssl_fips',
154154
help='Build OpenSSL using FIPS canister .o file in supplied folder')
155155

156+
parser.add_option('--openssl-use-def-ca-store',
157+
action='store_true',
158+
dest='use_openssl_ca_store',
159+
help='Use OpenSSL supplied CA store instead of compiled-in Mozilla CA copy.')
160+
156161
shared_optgroup.add_option('--shared-http-parser',
157162
action='store_true',
158163
dest='shared_http_parser',
@@ -953,6 +958,8 @@ def configure_openssl(o):
953958
o['variables']['node_use_openssl'] = b(not options.without_ssl)
954959
o['variables']['node_shared_openssl'] = b(options.shared_openssl)
955960
o['variables']['openssl_no_asm'] = 1 if options.openssl_no_asm else 0
961+
if options.use_openssl_ca_store:
962+
o['defines'] += ['NODE_OPENSSL_CERT_STORE']
956963
if options.openssl_fips:
957964
o['variables']['openssl_fips'] = options.openssl_fips
958965
fips_dir = os.path.join(root_dir, 'deps', 'openssl', 'fips')
Collapse file

‎src/node_crypto.cc‎

Copy file name to clipboardExpand all lines: src/node_crypto.cc
+4Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -708,10 +708,14 @@ static X509_STORE* NewRootCertStore() {
708708
}
709709

710710
X509_STORE* store = X509_STORE_new();
711+
#if defined(NODE_OPENSSL_CERT_STORE)
712+
X509_STORE_set_default_paths(store);
713+
#else
711714
for (X509 *cert : root_certs_vector) {
712715
X509_up_ref(cert);
713716
X509_STORE_add_cert(store, cert);
714717
}
718+
#endif
715719

716720
return store;
717721
}

0 commit comments

Comments
0 (0)
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.