Fix WIndows shell + unit tests

packages/safe-chain/src/registryProxy/certUtils.js

@@ -2,12 +2,17 @@ import forge from "node-forge";
 import path from "path";
 import fs from "fs";
 import os from "os";
+import { getSafeChainDir } from "../config/environmentVariables.js";
 
-const certFolder = path.join(os.homedir(), ".safe-chain", "certs");
 const ca = loadCa();
 
 const certCache = new Map();
 
+function getCertFolder() {
+  const safeChainDir = getSafeChainDir() ?? path.join(os.homedir(), ".safe-chain");
+  return path.join(safeChainDir, "certs");
+}
+
 /**
  * @param {forge.pki.PublicKey} publicKey
  * @returns {string}
@@ -20,7 +25,7 @@ function createKeyIdentifier(publicKey) {
 }
 
 export function getCaCertPath() {
-  return path.join(certFolder, "ca-cert.pem");
+  return path.join(getCertFolder(), "ca-cert.pem");
 }
 
 /**
@@ -112,6 +117,7 @@ export function generateCertForHost(hostname) {
 }
 
 function loadCa() {
+  const certFolder = getCertFolder();
   const keyPath = path.join(certFolder, "ca-key.pem");
   const certPath = path.join(certFolder, "ca-cert.pem");
 

packages/safe-chain/src/registryProxy/certUtils.spec.js

@@ -0,0 +1,71 @@
+import { describe, it, beforeEach, afterEach, mock } from "node:test";
+import assert from "node:assert";
+
+describe("certUtils", () => {
+  let originalSafeChainDir;
+
+  beforeEach(() => {
+    originalSafeChainDir = process.env.SAFE_CHAIN_DIR;
+  });
+
+  afterEach(() => {
+    if (originalSafeChainDir === undefined) {
+      delete process.env.SAFE_CHAIN_DIR;
+    } else {
+      process.env.SAFE_CHAIN_DIR = originalSafeChainDir;
+    }
+
+    mock.reset();
+  });
+
+  it("stores CA certificates in SAFE_CHAIN_DIR when configured", async () => {
+    process.env.SAFE_CHAIN_DIR = "/custom/safe-chain";
+
+    mock.module("fs", {
+      defaultExport: {
+        existsSync: () => false,
+        mkdirSync: () => {},
+        writeFileSync: () => {},
+      },
+    });
+
+    mock.module("node-forge", {
+      defaultExport: {
+        pki: {
+          getPublicKeyFingerprint: () => "fingerprint",
+          rsa: {
+            generateKeyPair: () => ({
+              publicKey: "public-key",
+              privateKey: "private-key",
+            }),
+          },
+          createCertificate: () => ({
+            publicKey: null,
+            serialNumber: "",
+            validity: {
+              notBefore: new Date(),
+              notAfter: new Date(),
+            },
+            setSubject: () => {},
+            setIssuer: () => {},
+            setExtensions: () => {},
+            sign: () => {},
+          }),
+          privateKeyToPem: () => "private-key-pem",
+          certificateToPem: () => "certificate-pem",
+        },
+        md: {
+          sha1: { create: () => "sha1" },
+          sha256: { create: () => "sha256" },
+        },
+      },
+    });
+
+    const { getCaCertPath } = await import("./certUtils.js");
+
+    assert.strictEqual(
+      getCaCertPath(),
+      "/custom/safe-chain/certs/ca-cert.pem",
+    );
+  });
+});