Can't use https.Agent with node-fetch in bun and dispatcher from undici's fetch — can't add self signed certificate pinning

[VityaSchel]

What version of Bun is running?

1.1.4+fbe2fe0c3

What platform is your computer?

Darwin 23.4.0 arm64 arm

What steps can reproduce the bug?

1. bun install node-fetch
2. import nodefetch from 'node-fetch'
3. use nodefetch('url', { agent: [any ssl agent] })
   bun will try to use internal fetch instead of node-fetch, so certificate pinning is not possible
   or
4. fetch('url', { dispatch: })
   dispatch is not available

What is the expected behavior?

Please add certificate pinning

What do you see instead?

ERR_TLS_CERT_ALTNAME_INVALID: ERR_TLS_CERT_ALTNAME_INVALID fetching [...] For more information, pass verbose: true in the second argument to fetch()

Additional information

Also haven't found a reliable way to disable tls certificate checking for selected fetch calls, not for entire application. This could've been done with https.Agent rejectUnauthorized: false but bun does not have this

[Levent0z]

use the agent property instead. The following code works just fine in node but fails in bun 1.1.6 with SELF_SIGNED_CERT_IN_CHAIN: self signed certificate in certificate chain.

// Using node-fetch
        return fetch(
            url,
            Object.assign(init || {}, {
                agent: function (_parsedURL) {
                    return new https.Agent({
                        cert: certInfo.cert,
                        ca: certInfo.ca,
                        key: certInfo.key
                    });
                }
            })
        );

[Levent0z]

the dispatch property is used by the fetch method from the undici package. Like above, the following works fine in node but fails in bun 1.1.6:

        //// Using undici fetch, with undici agent
        return fetch(
            url,
            Object.assign(init || {}, {
                dispatcher: new Agent({
                    connect: {
                        cert: certInfo.cert,
                        ca: certInfo.ca,
                        key: certInfo.key
                    }
                })
            })
        );

[Ivan-Baranov]

Clickhouse self signed certificate in certificate chain
ClickHouse/clickhouse-js#286