@ai-ecoverse/slicc-kernel 1.20.0 → 1.20.1

package/dist/node.js

@@ -4664,12 +4664,27 @@ function kernelCa(store) {
 function kernelTlsEngine(load) {
   return () => loadTlsEngine(load);
 }
-async function writeCaFile(fs, ca) {
-  const { pem: pem2 } = await ca();
-  const current = await fs.exists(CA_PATH) ? await fs.readFile(CA_PATH) : void 0;
-  if (current === pem2) return;
+var CERTIFICATE = /-----BEGIN CERTIFICATE-----[\s\S]*?-----END CERTIFICATE-----/g;
+var CA_BUNDLE_MAX = 16;
+var CA_FILE_LOCK = "slicc-kernel-ca-file";
+var CA_FILE_TRIES = 3;
+async function addToBundle(fs, own) {
+  const current = await fs.exists(CA_PATH) ? await fs.readFile(CA_PATH) : "";
+  const all = current.match(CERTIFICATE) ?? [];
+  const others = all.filter((cert) => cert !== own);
+  if (others.length < all.length) return true;
+  const bundle = [...others, own].slice(-CA_BUNDLE_MAX);
   await fs.mkdir(CA_PATH.slice(0, CA_PATH.lastIndexOf("/")), { recursive: true });
-  await fs.writeFile(CA_PATH, pem2);
+  await fs.writeFile(CA_PATH, `${bundle.join("\n")}
+`);
+  return false;
+}
+async function writeCaFile(fs, ca, locks = globalThis.navigator?.locks) {
+  const own = (await ca()).pem.trim();
+  const update = async () => {
+    for (let i = 0; i < CA_FILE_TRIES && !await addToBundle(fs, own); i++) ;
+  };
+  await (locks ? locks.request(CA_FILE_LOCK, update) : update());
 }
 function enableNetwork(net, options) {
   let proxy;