nodejs
diff --git a/Collapse file
‎configure‎
Copy file name to clipboardExpand all lines: configure
+7Lines changed: 7 additions & 0 deletions b/Collapse file
‎configure‎
Copy file name to clipboardExpand all lines: configure
+7Lines changed: 7 additions & 0 deletions
diff --git a/Collapse file
‎src/node_crypto.cc‎
Copy file name to clipboardExpand all lines: src/node_crypto.cc
+4Lines changed: 4 additions & 0 deletions b/Collapse file
‎src/node_crypto.cc‎
Copy file name to clipboardExpand all lines: src/node_crypto.cc
+4Lines changed: 4 additions & 0 deletions
@@ -144,6 +144,11 @@ parser.add_option('--openssl-fips',
     dest='openssl_fips',
     help='Build OpenSSL using FIPS canister .o file in supplied folder')
 
+parser.add_option('--openssl-use-def-ca-store',
+    action='store_true',
+    dest='use_openssl_ca_store',
+    help='Use OpenSSL supplied CA store instead of compiled-in Mozilla CA copy.')
+
 shared_optgroup.add_option('--shared-http-parser',
     action='store_true',
     dest='shared_http_parser',
@@ -940,6 +945,8 @@ def configure_openssl(o):
   o['variables']['node_use_openssl'] = b(not options.without_ssl)
   o['variables']['node_shared_openssl'] = b(options.shared_openssl)
   o['variables']['openssl_no_asm'] = 1 if options.openssl_no_asm else 0
+  if options.use_openssl_ca_store:
+    o['defines'] += ['NODE_OPENSSL_CERT_STORE']
   if options.openssl_fips:
     o['variables']['openssl_fips'] = options.openssl_fips
     fips_dir = os.path.join(root_dir, 'deps', 'openssl', 'fips')
 
@@ -707,10 +707,14 @@ static X509_STORE* NewRootCertStore() {
   }
 
   X509_STORE* store = X509_STORE_new();
+#if defined(NODE_OPENSSL_CERT_STORE)
+  X509_STORE_set_default_paths(store);
+#else
   for (X509 *cert : root_certs_vector) {
     X509_up_ref(cert);
     X509_STORE_add_cert(store, cert);
   }
+#endif
 
   return store;
 }
Original file line number	Diff line number	Diff line change
`@@ -707,10 +707,14 @@ static X509_STORE* NewRootCertStore() {`
`707`	`707`	`}`
`708`	`708`
`709`	`709`	`X509_STORE* store = X509_STORE_new();`
	`710`	`+#if defined(NODE_OPENSSL_CERT_STORE)`
	`711`	`+ X509_STORE_set_default_paths(store);`
	`712`	`+#else`
`710`	`713`	`for (X509 *cert : root_certs_vector) {`
`711`	`714`	`X509_up_ref(cert);`
`712`	`715`	`X509_STORE_add_cert(store, cert);`
`713`	`716`	`}`
	`717`	`+#endif`
`714`	`718`
`715`	`719`	`return store;`
`716`	`720`	`}`