tls.setDefaultCACertificates(certs)

• certs <string[]> | <ArrayBufferView[]> 一组 PEM 格式的 CA 证书。

设置 Node.js TLS 客户端使用的默认 CA 证书。如果提供的证书解析成功，它们将成为 tls.getCACertificates() 返回的默认 CA 证书列表，并被后续未指定自身 CA 证书的 TLS 连接使用。这些证书在设置为默认之前将进行去重。

🌐 Sets the default CA certificates used by Node.js TLS clients. If the provided certificates are parsed successfully, they will become the default CA certificate list returned by tls.getCACertificates() and used by subsequent TLS connections that don't specify their own CA certificates. The certificates will be deduplicated before being set as the default.

这个功能只会影响当前的 Node.js 线程。之前被 HTTPS 代理缓存的会话不会受到这个改变的影响，所以这个方法应该在建立任何不想要的可缓存 TLS 连接之前调用。

🌐 This function only affects the current Node.js thread. Previous sessions cached by the HTTPS agent won't be affected by this change, so this method should be called before any unwanted cacheable TLS connections are made.

要使用系统 CA 证书作为默认证书：

🌐 To use system CA certificates as the default:

const tls = require('node:tls');
tls.setDefaultCACertificates(tls.getCACertificates('system'));import tls from 'node:tls';
tls.setDefaultCACertificates(tls.getCACertificates('system'));拷贝

此函数会完全替换默认的 CA 证书列表。要在现有默认证书中添加额外证书，请获取当前的证书并将其追加：

🌐 This function completely replaces the default CA certificate list. To add additional certificates to the existing defaults, get the current certificates and append to them:

const tls = require('node:tls');
const currentCerts = tls.getCACertificates('default');
const additionalCerts = ['-----BEGIN CERTIFICATE-----\n...'];
tls.setDefaultCACertificates([...currentCerts, ...additionalCerts]);import tls from 'node:tls';
const currentCerts = tls.getCACertificates('default');
const additionalCerts = ['-----BEGIN CERTIFICATE-----\n...'];
tls.setDefaultCACertificates([...currentCerts, ...additionalCerts]);拷贝