tls ca: option doesn't support the same formats as openssl -CAfile #24761
Description
- Version: all
- Platform: all
- Subsystem: tls
OpenSSL supports "BEGIN TRUSTED CERTIFICATE", whereas Node.js silently ignores them. When people fail to authenticate with a ca: file, they often try with other tools (openssl s_client -CAfile ..., curl -cacert ..., ...) to confirm where the CAs are valid. They find they are, but that they don't work with Node.js. Ouch.
Fixed in #24733