tls: don't let NODE_TLS_REJECT_UNAUTHORIZED=0 weaken a server's rejectUnauthorized default - #35245

Open

robobun wants to merge 9 commits into

mainfrom

farm/a8b6db2b/server-reject-unauthorized-env

Commits on Oct 1, 2026

tls: don't let NODE_TLS_REJECT_UNAUTHORIZED=0 weaken a server's rejectUnauthorized default
robobun
committed
e17ac11
node:tls: keep the Server rejectUnauthorized default at true under NODE_TLS_REJECT_UNAUTHORIZED=0
robobun
committed
f58371e
test: drain stderr in the node:tls rejectUnauthorized subprocess test
robobun
committed
1ecf779
test: assert the certificate-rejection signal in the node:tls rejectUnauthorized test
robobun
committed
c69d312
ci: retrigger
robobun
committed
5e67b65
Tighten the is_server doc comment
robobun
committed
87d5f29
types: say that a TLS server's rejectUnauthorized default is true
robobun
committed
34bba21
test: cover Bun.serve and upgradeTLS under NODE_TLS_REJECT_UNAUTHORIZED=0
robobun
committed
f8c0e7d
test: assert the server-side verification result in the env-var TLS tests
robobun
committed
9424538