Add http.proxy-cainfo config for proxy certs by koxu1996 · Pull Request #15374 · rust-lang/cargo (original) (raw)

@rfcbot concern need-rationale-other-than-curl-bug

According to #15376 , it sounds like the curl command-line tool automatically uses the non-proxy CA info as the proxy CA info, if no proxy CA info is specifically provided. This behavior doesn't occur in libcurl, or in other clients like cargo.

I think it'd be appropriate for cargo to implement the same behavior as the curl command-line tool. That would make this use case work automatically, without requiring configuration.

There may still be a reason to have this separate configuration, but we'd need a separate motivation for it other than the case where the proxy needs a system CA certificate and this config is being used to work around us not automatically using that.