Shared custom CA bundle resolution for subprocesses and outbound TLS clients.
CODEX_CA_CERTIFICATE takes precedence over SSL_CERT_FILE. Blank values are
treated as unset. When neither variable is set, callers should fall back to
system trust roots.
Summary
Functions
Returns the effective CA certificate bundle path, if any.
Returns subprocess environment overrides for the resolved CA bundle.
Returns subprocess environment overrides for the resolved CA bundle.
Returns :httpc SSL options for the resolved CA bundle.
Merges CA-specific SSL options into an :httpc options keyword list.
Merges CA-specific connect_options into an existing Req options keyword list.
Returns Req connect_options for the resolved CA bundle.
Returns websocket SSL options for the resolved CA bundle.
Functions
@spec certificate_file() :: String.t() | nil
Returns the effective CA certificate bundle path, if any.
Returns subprocess environment overrides for the resolved CA bundle.
Returns subprocess environment overrides for the resolved CA bundle.
@spec httpc_ssl_options() :: keyword()
Returns :httpc SSL options for the resolved CA bundle.
Merges CA-specific SSL options into an :httpc options keyword list.
Merges CA-specific connect_options into an existing Req options keyword list.
@spec req_connect_options() :: keyword()
Returns Req connect_options for the resolved CA bundle.
@spec websocket_ssl_options() :: keyword()
Returns websocket SSL options for the resolved CA bundle.