Skip to content

crypto: use system CAs instead of bundled ones

Checklist
  • make -j4 test (UNIX), or vcbuild test nosign (Windows) passes
  • commit message follows commit guidelines
Affected core subsystem(s)

crypto

Description of change

Use system supplied CAs instead of using Node's bundled version. This is a compile time option with default reverting back to using bundled certificates.

Also simplify cert_store lifetime by using reference count instead of pulling it from under the SSL_CTX right before deletion. (merged)

Merge request reports

Loading