From e6220e1316f86af818a0ccbfe1c09d7e918b41cf Mon Sep 17 00:00:00 2001
From: David Brailovsky <davidbrai@gmail.com>
Date: Tue, 13 Oct 2026 11:23:56 +0200
Subject: [PATCH] fix: keep NODE_EXTRA_CA_CERTS in test.sh

Network tests failed with self-signed certificate errors behind proxies that
inspect HTTPS (corporate proxies, sandboxes like Gondolin), because test.sh
starts tests with an empty environment.
---
 test.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/test.sh b/test.sh
index d3f07befe..574b5cdda 100755
--- a/test.sh
+++ b/test.sh
@@ -69,6 +69,11 @@ for name in SystemRoot SYSTEMROOT WINDIR COMSPEC PATHEXT; do
 	[[ -z "$value" ]] || test_env+=("$name=$value")
 done
 
+# Trust extra certificates of proxies that inspect HTTPS (corporate proxies, sandboxes).
+# Network tests fail with self-signed certificate errors without it.
+value="${NODE_EXTRA_CA_CERTS-}"
+[[ -z "$value" ]] || test_env+=("NODE_EXTRA_CA_CERTS=$value")
+
 # Preserve CI detection only for runner behavior and test reporting.
 for name in CI GITHUB_ACTIONS; do
 	value="${!name-}"