skills.rest
nathanvale
nathanvaleCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

node-cert

Diagnose and fix Node.js certificate trust issues behind SSL-inspecting corporate proxies.

Updated Feb 2, 2026
Search Tags:#troubleshooting#node.js#proxy#certificate#openssl#ssl-inspection#ca-bundle
One-click install
npx skills add https://github.com/nathanvale/side-quest-plugins --skill node-cert
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: node-cert
Source: https://github.com/nathanvale/side-quest-plugins/tree/main/plugins/node-cert/skills/node-cert
Command: npx skills add https://github.com/nathanvale/side-quest-plugins --skill node-cert

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires openssl, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Node.js certificate trust issues arise when behind SSL-inspecting corporate proxies, leading to errors like UNABLE_TO_VERIFY_LEAF_SIGNATURE. This skill guides diagnosing and fixing trust failures so Node.js tools can establish trusted HTTPS connections in restricted networks.

Core Features & Use Cases

  • Diagnose SSL trust problems in Node.js behind corporate proxies.
  • Extract the corporate root CA and configure NODE_EXTRA_CA_CERTS, including bundling with system CAs when needed.
  • Toggle proxy and CA settings for development, CI, and local tooling to maintain seamless connectivity.

Quick Start

Run /node-cert:diagnose to verify your environment and, if needed, run /node-cert:extract-cert to obtain the corporate root CA.

Frequently Asked Questions about node-cert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
Why does Node.js throw UNABLE_TO_VERIFY_LEAF_SIGNATURE behind a corporate proxy?▼

You fix Node.js certificate errors by extracting the corporate root CA and pointing NODE_EXTRA_CA_CERTS to it. This skill automates CA extraction and bundle verification, establishing trusted HTTPS connections for development and CI pipelines.

How do I extract the corporate root CA for Node.js SSL inspection?▼

You extract the corporate root CA by running automated diagnosis and extraction scripts against your proxied environment. This skill provides the necessary tooling to obtain the CA and bundle it with system CAs when needed for Node.js trust.

Do I need openssl to configure NODE_EXTRA_CA_CERTS for my VPN?▼

Yes, openssl is required as a dependency to extract and manage certificates for NODE_EXTRA_CA_CERTS. This skill leverages openssl commands to automate CA extraction and bundle verification for VPN and corporate network environments.

Can I toggle proxy and CA settings for Node.js in CI pipelines?▼

Yes, you can toggle proxy and CA settings in CI pipelines to maintain seamless connectivity. This skill provides environment toggling features that enable reliable HTTPS connections across development, CI, and local tooling contexts.

What is the best way to bundle system CAs with a corporate root CA in Node.js?▼

The best way to bundle system CAs with a corporate root CA is through automated extraction and verification scripts. This approach ensures Node.js trusts both corporate and public certificates, preventing SSL errors during development and operations.

Related Skills

Explore More Software Engineering Skills→
devingobledevingoble

dotnet-devcert-trust

Diagnoses and fixes .NET HTTPS dev certificate trust issues on Linux.

Community
Advanced
MushroomDAOMushroomDAO

Network Switch Skill

Toggle proxy environment variables for external network access in development workflows.

Official
Basic
ErixWongErixWong
17

net-operations

Perform DNS lookups, SSL certificate analysis, and HTTP header checks.

Community
Intermediate
seiggyseiggy
57

dotnet-devcert-trust

Diagnoses and resolves .NET HTTPS development certificate trust issues on Linux.

Community
Advanced