pub const EXTRA_CA_CERTS: &str = "DIDBOT_EXTRA_CA_CERTS";Expand description
The environment variable naming a PEM file of certificate authorities every client built here trusts, on top of the ones it is built with.
This workspace’s reqwest verifies against a bundled root store, which
means it ignores the machine’s own — so a server serving a certificate
from didbot_tls::local, which is what a .localhost zone serves, is a
server these clients would otherwise refuse. Naming the authority’s
certificate here is how a development stack is reached. The spelling
matches Node’s NODE_EXTRA_CA_CERTS, which does the same job for the
Node tools beside these.
Additive, and only additive: nothing here can remove a root, and there is no way to switch verification off.