Support adding custom CA

crates/taplo-cli/src/lib.rs

@@ -5,7 +5,12 @@ use std::{
     path::{Path, PathBuf},
     sync::Arc,
 };
-use taplo_common::{config::Config, environment::Environment, schema::Schemas, util::Normalize};
+use taplo_common::{
+    config::Config,
+    environment::Environment,
+    schema::Schemas,
+    util::{get_reqwest_client, Normalize},
+};
 
 pub mod args;
 pub mod commands;
@@ -21,10 +26,7 @@ pub struct Taplo<E: Environment> {
 impl<E: Environment> Taplo<E> {
     pub fn new(env: E) -> Self {
         #[cfg(not(target_arch = "wasm32"))]
-        let http = reqwest::Client::builder()
-            .timeout(std::time::Duration::from_secs(5))
-            .build()
-            .unwrap();
+        let http = get_reqwest_client(std::time::Duration::from_secs(5)).unwrap();
 
         #[cfg(target_arch = "wasm32")]
         let http = reqwest::Client::default();

crates/taplo-common/src/util.rs

@@ -120,3 +120,27 @@ pub(crate) fn normalize_str(s: &str) -> Cow<str> {
         percent_decoded
     }
 }
+
+#[tracing::instrument]
+pub fn get_reqwest_client(timeout: std::time::Duration) -> Result<reqwest::Client, reqwest::Error> {
+    fn get_cert() -> Result<reqwest::Certificate, anyhow::Error> {
+        let path = std::env::var("TAPLO_EXTRA_CA_CERTS")?;
+        let path = Path::new(&path);
+        let ext = path.extension().and_then(|ext| ext.to_str());
+        let buf = std::fs::read(path)?;
+        tracing::info!(
+            "Found a custom CA {}. Reading the CA...",
+            path.to_string_lossy()
+        );
+        match ext {
+            Some("der") => Ok(reqwest::Certificate::from_der(&buf)?),
+            _ => Ok(reqwest::Certificate::from_pem(&buf)?),
+        }
+    }
+    let mut builder = reqwest::Client::builder().timeout(timeout);
+    if let Ok(cert) = get_cert() {
+        builder = builder.add_root_certificate(cert);
+        tracing::info!("Added the custom CA");
+    }
+    builder.build()
+}

crates/taplo-lsp/src/world.rs

@@ -18,6 +18,7 @@ use taplo_common::{
         associations::{priority, source, AssociationRule, SchemaAssociation},
         Schemas,
     },
+    util::get_reqwest_client,
     AsyncRwLock, HashMap, IndexMap,
 };
 
@@ -124,10 +125,7 @@ impl<E: Environment> WorkspaceState<E> {
 
         #[cfg(not(target_arch = "wasm32"))]
         {
-            client = reqwest::Client::builder()
-                .timeout(Duration::from_secs(10))
-                .build()
-                .unwrap();
+            client = get_reqwest_client(Duration::from_secs(10)).unwrap();
         }
 
         Self {