mirror of
https://github.com/oven-sh/bun
synced 2026-02-15 13:22:07 +00:00
05b5fce694
The system CA implementation now correctly follows Node.js certificate loading order instead of replacing bundled certificates: Node.js loading order: 1. Default root certs (bundled Mozilla certificates) 2. System certs (when --use-system-ca is enabled) 3. Extra certs (NODE_EXTRA_CA_CERTS) Key changes: - Always load bundled root certificates first - Add system CAs as additional certificates when --use-system-ca is set - Keep NODE_EXTRA_CA_CERTS loading last - System CAs are now additive, not replacement - Updated tests to reflect additive behavior This matches PR #21092 behavior where system CAs supplement rather than replace the bundled certificate store, providing both comprehensive coverage and system-specific trust settings. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>