Stream: wasi

Topic: HTTP client PKI roots

view this post on Zulip Lann Martin (Jun 05 2024 at 18:40):

Am I right that wasmtime-wasi-http's default_send_request has no way to specify custom root certs? Is that something that could be added to OutgoingRequestConfig or would we prefer that to require a fully custom impl?

view this post on Zulip Pat Hickey (Jun 05 2024 at 19:52):

That seems reasonable to add to the config

view this post on Zulip Lann Martin (Jun 05 2024 at 19:58):

https://github.com/bytecodealliance/wasmtime/issues/8748

wasi-http: Allow setting TLS root certs for `default_send_request` · Issue #8748 · bytecodealliance/wasmtime
Currently, the TLS roots are hard-coded to the webpki-roots set. This is a good default, but in some scenarios private roots are required. We should be able to add options to OutgoingRequestConfig ...

Last updated: Jan 10 2026 at 02:36 UTC