From 1e5807f647cd717d014c21993655ece5ba118919 Mon Sep 17 00:00:00 2001 From: Lilleman auf Larv Date: Wed, 26 Aug 2026 21:50:09 +0200 Subject: [PATCH] Record the TLS certificate decision --- AGENTS.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/AGENTS.md b/AGENTS.md index 9b95af9..55f0337 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -139,3 +139,11 @@ exactly 140. peer's FIN, so `server.close()` hangs forever — that is a test bug, not a library one. - `assert.equal` from `node:assert/strict` narrows its first argument, so a following `?.` on the same value is flagged as unnecessary. Assert once with `assert.ok(x)` and use plain access after. + +## Decisions + +- **The TLS tests build their own self-signed certificate in DER** (`test/tls.test.ts`) instead of + adding a devDependency or shelling out to openssl. Maintainer's call, 2026-08-26: the dev image + `node:24.18.0-bookworm-slim` ships no openssl binary, so a shelled-out fixture would pass in CI + and fail on every developer machine, and a committed key leaks in a public repository. Valid while + the dev image has no openssl.