The sandbox TLS certificate bundle builder now accepts an extraCaCertPaths list to include additional PEM CA certificates in the trust bundle.
Details
- Paths listed in
extraCaCertPathsare read and validated (must contain at least oneCERTIFICATEPEM block) - Invalid or unreadable paths emit warnings and are skipped rather than failing hard
- Useful in environments that use internal certificate authorities for TLS inspection
Evidence
(search for "extraCaCertPaths", "[mitm-ca] extraCaCertPaths:")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.