Editorial question54.2K views1,367 votes0 answers1,046 following
AI-generatedUNABLE_TO_VERIFY_LEAF_SIGNATURE during pnpm tarball downloads with strict-ssl disabled and custom ca configured
Corporate networks that intercept TLS often require pnpm to trust a custom certificate authority while also disabling strict SSL validation. In these environments, pnpm install can fail with UNABLE_TO_VERIFY_LEAF_SIGNATURE even after both strict-ssl=false and a custom ca or cafile are configured. The uncertainty is that pnpm's fetcher appears to apply these
pnpm