Tracking issue: custom CA certificate support

Trying to track the recent changes that allow easier configuration of custom CA certificate for constrained environments and the backports

• Support --use-system-ca for macOS https://github.com/nodejs/node/pull/56599
• Support --use-system-ca for Windows https://github.com/nodejs/node/pull/56833
• Support --use-system-ca for other Unix-like platforms: https://github.com/nodejs/node/pull/57009
• JS API to query CA certificates: https://github.com/nodejs/node/pull/57107
• JS API to configure the CA certificates https://github.com/nodejs/node/pull/58822
• Encouraging use of --use-system-ca in certificate errors: https://github.com/nodejs/node/pull/57362
• Fixing leak of --use-system-ca https://github.com/nodejs/node/pull/56832
• Add NODE_USE_SYSTEM_CA=1 https://github.com/nodejs/node/pull/59276
• Load system CA certificates off thread https://github.com/nodejs/node/pull/59550
• Only load certificates off thread when tls is used https://github.com/nodejs/node/pull/59856
• Make --use-system-ca a per-env option so that workers can enable/disable them individually https://github.com/nodejs/node/pull/60678
• Graceful handling of invalid certificates: https://github.com/nodejs/node/pull/61784 https://github.com/nodejs/node/pull/62576
• Implement certificate distrust on Windows to match Chromium's policy: https://github.com/nodejs/node/blob/5623194a6b16192084d2753a80c350c4ae3dec24/src/crypto/crypto_context.cc#L647-L648
• Make NODE_USE_SYSTEM_CA=0 disable system CA if it gets enabled by default
• Provide a build-time option to enable --use-system-ca by default
• Enable --use-system-ca by default

Examinez les éléments restants non cochés de cette tracking issue, en commençant par l’emplacement référencé de gestion des certificats dans src/crypto/crypto_context.cc autour de la ligne 647 ainsi que les PRs liés 61784 et 62576. Comparez les entrées terminées et en attente afin de comprendre la portée prévue. C’est terminé lorsque les comportements et options de certificats restants listés sont implémentés et que les éléments correspondants de la liste de contrôle peuvent être cochés.