-
-
Notifications
You must be signed in to change notification settings - Fork 33.2k
Closed
Labels
feature requestIssues that request new features to be added to Node.js.Issues that request new features to be added to Node.js.
Description
What is the problem this feature will solve?
Third-party SaaS TLS proxies (e.g. ZScaler) will often be provided with an Intermediate CA certificate and not the organisation root CA certificate.
macOS supports Intermediate CA certificates and we should bring this to Windows as well.
See #56833 (comment)
What is the feature you are proposing to solve the problem?
I'm researching and looking for other implementations, so far I've verified locally that when I add:
- Root CA certificate to Trusted Root Certification Authorities
- Intermediate CA certificate to Intermediate Certification Authorities
In the Certificates - Current Use store.
See Chromium source code: https://github.com/chromium/chromium/blob/98f89988c9774d0e138a0724aa64c46187203a77/net/cert/internal/trust_store_win.cc#L220-L222
Chrome works and I can access https://localhost:8443 from my test repository that was used for the macOS implementation: https://github.com/timja/openjdk-intermediate-ca-reproducer
What alternatives have you considered?
No response
Metadata
Metadata
Assignees
Labels
feature requestIssues that request new features to be added to Node.js.Issues that request new features to be added to Node.js.
Type
Projects
Status
Awaiting Triage