Ability to set NODE_EXTRA_CA_CERTS at runtime

[sean256]

What is the problem this feature would solve?

I really want to use bun build --compile and include a custom ca in the bundle so my users don't have to bother setting NODE_EXTRA_CA_CERTS before running the standalone app.

What is the feature you are proposing to solve the problem?

Some hook to add a cert at runtime.

What alternatives have you considered?

I have yet to find any alternative that has worked. I have tried bunfig.toml preload, https global options, agent overrides...

[redbmk]

I was thinking you could do this on startup:

1. copy the contents of NODE_EXTRA_CA_CERTS if it already exists
2. append your pre-bundled certs and write that final string to a temp file
3. update process.env.NODE_EXTRA_CA_CERTS to point to the temp file

But that didn't seem to work

1. it looks bun's fetch uses the value of NODE_EXTRA_CA_CERTS at startup, so changing it once bun is running doesn't help
2. that would depend on a fix for NODE_EXTRA_CA_CERTS does not work with certificate bundle pem files (it does work with node) #13867

fwiw it doesn't seem like this is possible in node either without an external dependency on undici if I'm reading this right, though it would be nice