From 32500b0465a8c8986989af4e6efcbe156f5d097d Mon Sep 17 00:00:00 2001 From: Sargun Vohra Date: Fri, 3 Apr 2026 02:57:51 -0700 Subject: [PATCH] container: set DENO_CERT alongside SSL_CERT_FILE for Deno CA trust Deno does not respect SSL_CERT_FILE and requires its own DENO_CERT env var to trust custom CA certificates. Without this, Deno-based tools (e.g. linear-cli) fail with certificate errors when the gateway's MITM CA is in use. Co-Authored-By: Claude Sonnet 4.6 --- src/container/index.ts | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/container/index.ts b/src/container/index.ts index 55e26a8..0e34c52 100644 --- a/src/container/index.ts +++ b/src/container/index.ts @@ -89,6 +89,8 @@ export class ContainerClient { const combinedPath = buildCombinedCaBundle(config.caCertificate); if (combinedPath) { args.push("-e", "SSL_CERT_FILE=/tmp/onecli-combined-ca.pem"); + // DENO_CERT: Deno does not respect SSL_CERT_FILE, it has its own env var + args.push("-e", "DENO_CERT=/tmp/onecli-combined-ca.pem"); args.push("-v", `${combinedPath}:/tmp/onecli-combined-ca.pem:ro`); } }