Use extra/self-signed https certificates

scripts/build-extension.mjs

@@ -5,6 +5,7 @@ import FS from 'node:fs'
 import Path from 'node:path'
 import { fileURLToPath } from 'node:url'
 import semver from 'semver'
+import "./extra-certs.mjs";
 
 /**
  * @param {string} itemName

scripts/build-web-extension.mjs

@@ -3,6 +3,7 @@ import esbuild from 'esbuild'
 import Path from 'node:path'
 import { fileURLToPath } from 'node:url'
 import fetch from 'node-fetch'
+import "./extra-certs.mjs";
 
 const __dirname = Path.dirname(fileURLToPath(import.meta.url))
 

scripts/extra-certs.mjs

@@ -0,0 +1,12 @@
+// @ts-check
+import https from "node:https";
+import tls from "node:tls";
+import fs from "node:fs";
+
+if (typeof process.env.NODE_EXTRA_CA_CERTS === "string") {
+ const extraCerts = process.env.NODE_EXTRA_CA_CERTS.split(",").map((certPath) =>
+ fs.readFileSync(certPath, "utf8")
+ );
+
+ https.globalAgent.options.ca = [...tls.rootCertificates, ...extraCerts];
+}