NODE_EXTRA_CA_CERTS does not work with certificate bundle pem files (it does work with node)

[sean256]

What version of Bun is running?

1.1.27

What platform is your computer?

Darwin arm64 arm

What steps can reproduce the bug?

Get a valid .pem file which has multiple valid certificates, point NODE_EXTRA_CA_CERTS to it, and observe it fails to work.

What is the expected behavior?

For it to load the cert and function.

What do you see instead?

UNABLE_TO_GET_ISSUER_CERT_LOCALLY

Additional information

No response

[sean256]

Any known workarounds for this?

[redbmk]

I was noticing that the test files (e.g. https://github.com/oven-sh/bun/blob/main/test/js/node/tls/fixtures/ca5-cert.pem) only include a single cert rather than a bundle. If you only need to support a single extra CA then you could use that instead of the bundle, but hopefully this is an easy fix

from what I can tell it only considers the first cert in the bundle

[ShlomoCode]

I'm working on this.