Deno: Custom CA certificates

[jajaperson]

In node, I was able to get around my organisations custom certificate authority using the $NODE_EXTRA_CA_CERTS environment variable. It seems to me that no such environmental variable or flag exists in deno.

[WilcoKruijer]

Is the --cert flag what you're looking for?

[bartlomieju]

As suggested by @WilcoKruijer --cert flag is what you're looking for @jajaperson - it takes a path to file with certificate that will be later used by Deno's HTTP client - both for module downloads as well as fetch() API.

[mkkhedawat]

Do we have an Environment variable alternative as well?
It can be a useful feature when creating internal base images for corporates.

[bartlomieju]

@mkkhedawat HTTP_PROXY and HTTPS_PROXY should work as well

[jajaperson]

@mkkhedawat do either of those take a .pem file path like --cert?

[mkkhedawat]

I would guess they take proxy URLs (cntlm/pac) just like node js. But I don't want to proxy internal traffic. So for my use case, I wrote a small script :

#!/bin/sh

if [[ $1 == "run" ]];
    then command shift && command /bin/deno2 run --cert=/usr/local/share/ca-certificates/corporate.pem "$@" ;
else
    command /bin/deno2 "$@";
fi;

& Docker file as

# prebuild cert workaround until deno starts using native tls
RUN mv /bin/deno /bin/deno2
COPY deno.sh /bin/deno
RUN chmod +x /bin/deno

It replaces deno run with deno run --cert=blah
Rest as usual.