mirror of
https://github.com/nodejs/node.git
synced 2025-05-03 11:12:55 +00:00
3473d1bd50
The 'test-tls-env-extra-ca-file-load.js' test assumes that NODE_EXTRA_CA_CERTS is not set. If the build environment happens to have it set, this test will fail. This change deletes that env var before running the test. PR-URL: https://github.com/nodejs/node/pull/43858 Reviewed-By: Tobias Nießen <tniessen@tnie.de> Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Rich Trott <rtrott@gmail.com>
44 lines
1.4 KiB
JavaScript
44 lines
1.4 KiB
JavaScript
'use strict';
|
|
// Flags: --expose-internals
|
|
|
|
const common = require('../common');
|
|
|
|
if (!common.hasCrypto)
|
|
common.skip('missing crypto');
|
|
|
|
const assert = require('assert');
|
|
const tls = require('tls');
|
|
const fixtures = require('../common/fixtures');
|
|
const { internalBinding } = require('internal/test/binding');
|
|
const binding = internalBinding('crypto');
|
|
|
|
const { fork } = require('child_process');
|
|
|
|
// This test ensures that extra certificates are loaded at startup.
|
|
if (process.argv[2] !== 'child') {
|
|
// Parent
|
|
const NODE_EXTRA_CA_CERTS = fixtures.path('keys', 'ca1-cert.pem');
|
|
const extendsEnv = (obj) => ({ ...process.env, ...obj });
|
|
|
|
// Remove any pre-existing extra CA certs.
|
|
delete process.env.NODE_EXTRA_CA_CERTS;
|
|
[
|
|
extendsEnv({ CHILD_USE_EXTRA_CA_CERTS: 'yes', NODE_EXTRA_CA_CERTS }),
|
|
extendsEnv({ CHILD_USE_EXTRA_CA_CERTS: 'no' }),
|
|
].forEach((processEnv) => {
|
|
fork(__filename, ['child'], { env: processEnv })
|
|
.on('exit', common.mustCall((status) => {
|
|
// Client did not succeed in connecting
|
|
assert.strictEqual(status, 0);
|
|
}));
|
|
});
|
|
} else if (process.env.CHILD_USE_EXTRA_CA_CERTS === 'yes') {
|
|
// Child with extra certificates loaded at startup.
|
|
assert.strictEqual(binding.isExtraRootCertsFileLoaded(), true);
|
|
} else {
|
|
// Child without extra certificates.
|
|
assert.strictEqual(binding.isExtraRootCertsFileLoaded(), false);
|
|
tls.createServer({});
|
|
assert.strictEqual(binding.isExtraRootCertsFileLoaded(), false);
|
|
}
|