Investigate loading CA certificates from OS

[chrmarti]

That node module adds the root certificates registered in Windows to node. Node by default only knows a hardcoded set of certificates that is copied from Mozilla: microsoft/vscode-github-issues-prs#28 (comment)

A success story: microsoft/vscode-github-issues-prs#28 (comment)

[joaomoreno]

cc @egamma possible plan item

[chrmarti]

Good old Node.js: This works, except that the https.globalAgent.options.ca is ignored when you pass an agent with the options to https.get/request. In that case you also need to pass the ca with the options. Of course not all node modules (e.g., adal-node for AAD sign-in) allow you to pass options to their requests, but pass an agent themselves.

For testing I used https://github.com/salrashid123/squid_proxy:

docker run  -p 3128:3128 -ti docker.io/salrashid123/squidproxy /apps/squid/sbin/squid -NsY -f /apps/squid.conf.intercept
wget https://raw.githubusercontent.com/salrashid123/squid_proxy/master/CA_crt.pem
curl -v --cacert CA_crt.pem -x localhost:3128  https://www.yahoo.com