With OpenSSL the SSL_CERT_DIR and SSL_CERT_FILE envvars enable overriding the system certificates trusted by the .NET application.
This is a request to, instead of overriding all system certificates, enable adding additional certificates from the file system using environment variables:
DOTNET_SSL_CERT_DIRS: a colon separate list of directories certificates are loaded from.DOTNET_SSL_CERT_FILES: a colon separate list of files certificates are loaded from.
Having a 'simple' way to extend the trusted certificates may provide a more secure alternative than opting into to insecure communication (e.g. NuGet/Home#12542).
cc @bartonjs @vcsjones @blowdart
With OpenSSL the
SSL_CERT_DIRandSSL_CERT_FILEenvvars enable overriding the system certificates trusted by the .NET application.This is a request to, instead of overriding all system certificates, enable adding additional certificates from the file system using environment variables:
DOTNET_SSL_CERT_DIRS: a colon separate list of directories certificates are loaded from.DOTNET_SSL_CERT_FILES: a colon separate list of files certificates are loaded from.Having a 'simple' way to extend the trusted certificates may provide a more secure alternative than opting into to insecure communication (e.g. NuGet/Home#12542).
cc @bartonjs @vcsjones @blowdart