please provide a way to use system-installed root certificates instead of bundled ones

[kapouer]

This is related to #1256.

In debian and derivatives, and probably other distributions too,
certificates are managed and configured system-wide.
For example /etc/ssl/certs/ca-certificates.crt which is also user-configurable.
It is so expected and useful that it'd be nice to add a configure switch to nodejs
so that it bundles a custom file, or even better, a runtime switch.
Currently i have a patch on nodejs partially doing that,
and i kept it beside me until someone complained it wasn't in the original release.

[rvagg]

probably a feature for --configure

/cc @nodejs/crypto @nodejs/build

[osher]

+1

We need this feature too - I'm working with a corporate that uses RapidSSL - which is not in the bundled certs list (As far as I can see).
On top of that - there just might be self-signed or self verifying authorities that inner networks might need to trust.

Thanks
:)

[jbergstroem]

I like this as well. Can you file a PR?

[brianary]

+1

This is also needed for decrypting corporate firewalls that use self-signed certificates which have been placed into OS cert stores by IT automation.

[AdamMajer]

PR: #8334 should fix this issue.