Relationships
↔ sibling #503#477 Support for Custom CA's
Opened by wandering213 · 5/28/2026· Shipped 6/7/2026
I'm behind a corporate proxy, when I try to connect to the extension store TLS validation fails due to TLS inspection on our end. Please add support for either specifying a custom CA or using the system CA certs or both.
Shipped
Click a lifecycle step above to view its details.
stack72 commented 5/28/2026, 8:37:42 PM
hey @wandering213 - what URL are you connecting to to get the extensions?
wandering213 commented 6/1/2026, 11:17:08 AM
wandering213 commented 6/1/2026, 11:27:12 AM
I can confirm that if I set DENO_TLS_CA_STORE=system that I'm able to connect now. It would be helpful if this was default behavior or was easily set via config.
keeb commented 6/1/2026, 2:52:01 PM
Thank you @wandering213! I'm on this.
keeb commented 6/1/2026, 3:44:40 PM
@wandering213 - system is part of the default, along with mozilla - for the bundled Mozilla's CA Certificate Program. So I think we are satisfying your requirements now. Can you verify?
wandering213 commented 6/1/2026, 3:54:40 PM
I pulled the latest version and if I remove the 'DENO_TLS_CA_STORE=system' from the environment then, I get an UnknownIssuer error when I run 'swamp update' or 'swamp extension search'. Is that what you mean when you were asking to verify?
keeb commented 6/7/2026, 5:26:16 PM
Thanks @wandering213 for reporting this! The fix has been merged and a release is on its way. We appreciate your contribution to swamp.
wandering213 commented 6/19/2026, 11:46:51 AM
Awesome thank you. It's working great.
Sign in to post a ripple.