Tracking issue: custom CA certificate support

Trying to track the recent changes that allow easier configuration of custom CA certificate for constrained environments and the backports

• Support --use-system-ca for macOS https://github.com/nodejs/node/pull/56599
• Support --use-system-ca for Windows https://github.com/nodejs/node/pull/56833
• Support --use-system-ca for other Unix-like platforms: https://github.com/nodejs/node/pull/57009
• JS API to query CA certificates: https://github.com/nodejs/node/pull/57107
• JS API to configure the CA certificates https://github.com/nodejs/node/pull/58822
• Encouraging use of --use-system-ca in certificate errors: https://github.com/nodejs/node/pull/57362
• Fixing leak of --use-system-ca https://github.com/nodejs/node/pull/56832
• Add NODE_USE_SYSTEM_CA=1 https://github.com/nodejs/node/pull/59276
• Load system CA certificates off thread https://github.com/nodejs/node/pull/59550
• Only load certificates off thread when tls is used https://github.com/nodejs/node/pull/59856
• Make --use-system-ca a per-env option so that workers can enable/disable them individually https://github.com/nodejs/node/pull/60678
• Graceful handling of invalid certificates: https://github.com/nodejs/node/pull/61784 https://github.com/nodejs/node/pull/62576
• Implement certificate distrust on Windows to match Chromium's policy: https://github.com/nodejs/node/blob/5623194a6b16192084d2753a80c350c4ae3dec24/src/crypto/crypto_context.cc#L647-L648
• Make NODE_USE_SYSTEM_CA=0 disable system CA if it gets enabled by default
• Provide a build-time option to enable --use-system-ca by default
• Enable --use-system-ca by default

Esamina gli elementi rimanenti non selezionati di questa tracking issue, iniziando dalla posizione di gestione dei certificati indicata in src/crypto/crypto_context.cc intorno alla riga 647 e dai PR collegati 61784 e 62576. Confronta le voci completate e quelle ancora da completare per comprendere l'ambito previsto. Il lavoro è completato quando i comportamenti e le opzioni dei certificati ancora elencati sono implementati e i corrispondenti elementi della checklist possono essere selezionati.