Function secureContextWithExtraCerts

src/spec-utils/httpRequest.ts:130–161

(output: Log, options?: tls.SecureContextOptions)

let _secureContextWithExtraCerts: Promise<tls.SecureContext | undefined> | undefined;

async function secureContextWithExtraCerts(output: Log, options?: tls.SecureContextOptions) {
	// Work around https://github.com/electron/electron/issues/10257.

	if (_secureContextWithExtraCerts) {
		return _secureContextWithExtraCerts;
	}

	return _secureContextWithExtraCerts = (async () => {
		if (!process.versions.electron || !process.env.NODE_EXTRA_CA_CERTS) {
			return undefined;
		}
	
		try {
			const content = await readLocalFile(process.env.NODE_EXTRA_CA_CERTS, { encoding: 'utf8' });
			const certs = (content.split(/(?=-----BEGIN CERTIFICATE-----)/g)
				.filter(pem => !!pem.length));
			output.write(`Loading ${certs.length} extra certificates from ${process.env.NODE_EXTRA_CA_CERTS}.`);
			if (!certs.length) {
				return undefined;
			}
	
			const secureContext = tls.createSecureContext(options);
			for (const cert of certs) {
				secureContext.context.addCACert(cert);
			}
			return secureContext;
		} catch (err) {
			output.write(`Error loading extra certificates from ${process.env.NODE_EXTRA_CA_CERTS}: ${err.message}`, LogLevel.Error);
			return undefined;
		}
	})();
}