Context
In PR #1567 (and the build_sdk job in .github/workflows/ci.yml), NODE_TLS_REJECT_UNAUTHORIZED=0 was set for the test:sdk matrix case in the crisp_unit job and for pnpm sdk:test in the build_sdk job.
This was necessary because @aztec/bb.js downloads the public Aztec Common Reference String (CRS) via Barretenberg.initSRSChonk over TLS (called in examples/CRISP/packages/crisp-sdk/src/vote.ts and packages/enclave-sdk/src/crypto/user-data-encryption.ts), and some CI runners reject the served TLS certificate as expired (CERT_HAS_EXPIRED).
Workaround
# .github/workflows/ci.yml (crisp_unit job)
NODE_TLS_REJECT_UNAUTHORIZED: ${{ matrix.test-suite == 'test:sdk' && '0' || '1' }}
# .github/workflows/ci.yml (build_sdk job)
NODE_TLS_REJECT_UNAUTHORIZED: '0'
Action Required
Once the TLS certificate for the Aztec CRS endpoint is renewed/fixed upstream (on Aztec's side), this workaround should be removed:
- Remove the
NODE_TLS_REJECT_UNAUTHORIZED: '0' env variable from the crisp_unit / test:sdk matrix case.
- Remove the
NODE_TLS_REJECT_UNAUTHORIZED: '0' env variable from the build_sdk Run the tests step.
- Verify CI passes without the bypass.
References
Reported by @ctrlc03
Context
In PR #1567 (and the
build_sdkjob in.github/workflows/ci.yml),NODE_TLS_REJECT_UNAUTHORIZED=0was set for thetest:sdkmatrix case in thecrisp_unitjob and forpnpm sdk:testin thebuild_sdkjob.This was necessary because
@aztec/bb.jsdownloads the public Aztec Common Reference String (CRS) viaBarretenberg.initSRSChonkover TLS (called inexamples/CRISP/packages/crisp-sdk/src/vote.tsandpackages/enclave-sdk/src/crypto/user-data-encryption.ts), and some CI runners reject the served TLS certificate as expired (CERT_HAS_EXPIRED).Workaround
Action Required
Once the TLS certificate for the Aztec CRS endpoint is renewed/fixed upstream (on Aztec's side), this workaround should be removed:
NODE_TLS_REJECT_UNAUTHORIZED: '0'env variable from thecrisp_unit/test:sdkmatrix case.NODE_TLS_REJECT_UNAUTHORIZED: '0'env variable from thebuild_sdkRun the testsstep.References
Reported by @ctrlc03