Support TLSConfiguration.trustRoots(.file)...

Support TLSConfiguration.trustRoots(.file) when converting to a `NWProtocolTLS.Options`

Author: adam-fowler

Sources/AsyncHTTPClient/NIOTransportServices/TLSConfiguration.swift

@@ -116,8 +116,11 @@
                 secTrustRoots = try certificates.compactMap { certificate in
                     try SecCertificateCreateWithData(nil, Data(certificate.toDERBytes()) as CFData)
                 }
-            case .some(.file):
-                preconditionFailure("TLSConfiguration.trustRoots.file is not supported")
+            case .some(.file(let file)):
+                let certificates = try NIOSSLCertificate.fromPEMFile(file)
+                secTrustRoots = try certificates.compactMap { certificate in
+                    try SecCertificateCreateWithData(nil, Data(certificate.toDERBytes()) as CFData)
+                }
 
             case .some(.default), .none:
                 break

Tests/AsyncHTTPClientTests/HTTPClientNIOTSTests.swift

@@ -108,4 +108,19 @@ class HTTPClientNIOTSTests: XCTestCase {
             }
         #endif
     }
+    
+    func testTrustRootCertificateLoadFail() {
+        guard isTestingNIOTS() else { return }
+        #if canImport(Network)
+        let tlsConfig = TLSConfiguration.forClient(trustRoots: .file("not/a/certificate"))
+        XCTAssertThrowsError(try tlsConfig.getNWProtocolTLSOptions()) { error in
+            switch error {
+            case let error as NIOSSL.NIOSSLError where error == .failedToLoadCertificate:
+                break
+            default:
+                XCTFail("\(error)")
+            }
+        }
+        #endif
+    }
 }