Add 'ca' config

doc/config.md

@@ -174,6 +174,17 @@ It's yet to be seen if this is a good idea.
 
 The browser that is called by the `npm docs` command to open websites.
 
+### ca
+
+* Default: The npm CA certificate
+* Type: String or null
+
+The Certificate Authority signing certificate that is trusted for SSL
+connections to the registry.
+
+Set to `null` to only allow "known" registrars, or to a specific CA cert
+to trust only that specific signing authority.
+
 ### cache
 
 * Default: Windows: `~/npm-cache`, Posix: `~/.npm`

html/doc/config.html

@@ -156,6 +156,16 @@ <h3 id="browser">browser</h3>
 
 <p>The browser that is called by the <code>npm docs</code> command to open websites.</p>
 
+<h3 id="ca">ca</h3>
+
+<ul><li>Default: The npm CA certificate</li><li>Type: String or null</li></ul>
+
+<p>The Certificate Authority signing certificate that is trusted for SSL
+connections to the registry.</p>
+
+<p>Set to <code>null</code> to only allow "known" registrars, or to a specific CA cert
+to trust only that specific signing authority.</p>
+
 <h3 id="cache">cache</h3>
 
 <ul><li>Default: Windows: <code>~/npm-cache</code>, Posix: <code>~/.npm</code></li><li>Type: path</li></ul>

html/doc/get.html

@@ -156,6 +156,16 @@ <h3 id="browser">browser</h3>
 
 <p>The browser that is called by the <code>npm docs</code> command to open websites.</p>
 
+<h3 id="ca">ca</h3>
+
+<ul><li>Default: The npm CA certificate</li><li>Type: String or null</li></ul>
+
+<p>The Certificate Authority signing certificate that is trusted for SSL
+connections to the registry.</p>
+
+<p>Set to <code>null</code> to only allow "known" registrars, or to a specific CA cert
+to trust only that specific signing authority.</p>
+
 <h3 id="cache">cache</h3>
 
 <ul><li>Default: Windows: <code>~/npm-cache</code>, Posix: <code>~/.npm</code></li><li>Type: path</li></ul>

html/doc/set.html

@@ -156,6 +156,16 @@ <h3 id="browser">browser</h3>
 
 <p>The browser that is called by the <code>npm docs</code> command to open websites.</p>
 
+<h3 id="ca">ca</h3>
+
+<ul><li>Default: The npm CA certificate</li><li>Type: String or null</li></ul>
+
+<p>The Certificate Authority signing certificate that is trusted for SSL
+connections to the registry.</p>
+
+<p>Set to <code>null</code> to only allow "known" registrars, or to a specific CA cert
+to trust only that specific signing authority.</p>
+
 <h3 id="cache">cache</h3>
 
 <ul><li>Default: Windows: <code>~/npm-cache</code>, Posix: <code>~/.npm</code></li><li>Type: path</li></ul>

lib/utils/config-defs.js

@@ -74,6 +74,25 @@ Object.defineProperty(exports, "defaults", {get: function () {
     , browser : process.platform === "darwin" ? "open"
               : process.platform === "win32" ? "start"
               : "google-chrome"
+
+    , ca : // the npm CA certificate.
+      "-----BEGIN CERTIFICATE-----\n"+
+      "MIIChzCCAfACCQDauvz/KHp8ejANBgkqhkiG9w0BAQUFADCBhzELMAkGA1UEBhMC\n"+
+      "VVMxCzAJBgNVBAgTAkNBMRAwDgYDVQQHEwdPYWtsYW5kMQwwCgYDVQQKEwNucG0x\n"+
+      "IjAgBgNVBAsTGW5wbSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxDjAMBgNVBAMTBW5w\n"+
+      "bUNBMRcwFQYJKoZIhvcNAQkBFghpQGl6cy5tZTAeFw0xMTA5MDUwMTQ3MTdaFw0y\n"+
+      "MTA5MDIwMTQ3MTdaMIGHMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExEDAOBgNV\n"+
+      "BAcTB09ha2xhbmQxDDAKBgNVBAoTA25wbTEiMCAGA1UECxMZbnBtIENlcnRpZmlj\n"+
+      "YXRlIEF1dGhvcml0eTEOMAwGA1UEAxMFbnBtQ0ExFzAVBgkqhkiG9w0BCQEWCGlA\n"+
+      "aXpzLm1lMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDLI4tIqPpRW+ACw9GE\n"+
+      "OgBlJZwK5f8nnKCLK629Pv5yJpQKs3DENExAyOgDcyaF0HD0zk8zTp+ZsLaNdKOz\n"+
+      "Gn2U181KGprGKAXP6DU6ByOJDWmTlY6+Ad1laYT0m64fERSpHw/hjD3D+iX4aMOl\n"+
+      "y0HdbT5m1ZGh6SJz3ZqxavhHLQIDAQABMA0GCSqGSIb3DQEBBQUAA4GBAC4ySDbC\n"+
+      "l7W1WpLmtLGEQ/yuMLUf6Jy/vr+CRp4h+UzL+IQpCv8FfxsYE7dhf/bmWTEupBkv\n"+
+      "yNL18lipt2jSvR3v6oAHAReotvdjqhxddpe5Holns6EQd1/xEZ7sB1YhQKJtvUrl\n"+
+      "ZNufy1Jf1r0ldEGeA+0ISck7s+xSh9rQD2Op\n"+
+      "-----END CERTIFICATE-----\n"
+
     , cache : path.resolve( home || temp
                           , process.platform === "win32"
                             ? "npm-cache" : ".npm")
@@ -148,6 +167,7 @@ exports.types =
   , "bin-publish" : Boolean
   , bindist : [String, null]
   , browser : String
+  , ca: [null, String]
   , cache : path
   , color : ["always", Boolean]
   , depth : Number

man1/config.1

@@ -310,6 +310,24 @@ Type: String
 .P
 The browser that is called by the \fBnpm docs\fR command to open websites\.
 .
+.SS "ca"
+.
+.IP "\(bu" 4
+Default: The npm CA certificate
+.
+.IP "\(bu" 4
+Type: String or null
+.
+.IP "" 0
+.
+.P
+The Certificate Authority signing certificate that is trusted for SSL
+connections to the registry\.
+.
+.P
+Set to \fBnull\fR to only allow "known" registrars, or to a specific CA cert
+to trust only that specific signing authority\.
+.
 .SS "cache"
 .
 .IP "\(bu" 4

man1/get.1

@@ -310,6 +310,24 @@ Type: String
 .P
 The browser that is called by the \fBnpm docs\fR command to open websites\.
 .
+.SS "ca"
+.
+.IP "\(bu" 4
+Default: The npm CA certificate
+.
+.IP "\(bu" 4
+Type: String or null
+.
+.IP "" 0
+.
+.P
+The Certificate Authority signing certificate that is trusted for SSL
+connections to the registry\.
+.
+.P
+Set to \fBnull\fR to only allow "known" registrars, or to a specific CA cert
+to trust only that specific signing authority\.
+.
 .SS "cache"
 .
 .IP "\(bu" 4

man1/set.1

@@ -310,6 +310,24 @@ Type: String
 .P
 The browser that is called by the \fBnpm docs\fR command to open websites\.
 .
+.SS "ca"
+.
+.IP "\(bu" 4
+Default: The npm CA certificate
+.
+.IP "\(bu" 4
+Type: String or null
+.
+.IP "" 0
+.
+.P
+The Certificate Authority signing certificate that is trusted for SSL
+connections to the registry\.
+.
+.P
+Set to \fBnull\fR to only allow "known" registrars, or to a specific CA cert
+to trust only that specific signing authority\.
+.
 .SS "cache"
 .
 .IP "\(bu" 4