system-ca

system-ca

Access the system certificate store on Windows, macOS and Linux.

import { systemCertsSync, systemCertsAsync } from 'system-ca';

console.log(systemCertsSync())
console.log(await systemCertsAsync())

tls.connect({
  host: 'google.com',
  port: 443,
  ca: await systemCertsAsync({ includeNodeCertificates: true })
})

The systemCertsSync() and systemCertsAsync() functions perform the same operation, namely, listing all trusted certificates as an array of PEM-formatted X.509 certificates.

The result can be passed directly to the ca option of tls.connect() and similar methods.

• Using systemCertsAsync() may be preferable, because accessing the system store can be slow, especially on Windows.
• systemCertsAsync() uses a worker thread under the hood on Windows and macOS.
• On Windows and macOS, this package always uses native addons for accessing the system certificate store.
• On all other platforms, both the async and the sync variant read from the typical system locations for storing trusted certificates (i.e. /etc/ssl, /etc/pki).

LICENSE

Apache-2.0