node:lts docker image is missing the SSL.com root certificate

[pbastia]

Running wget comand on https endpoints with an SSL.com root certificate fails

Environment

• Platform:Docker / Openshift / OSX Sequoia
• Docker Version:4.37.2
• Node.js Version:22.13.0 (lts)
• Image Tag:lts

Expected Behavior

wget <https://website with Entrust cert based on SSL.com root>

Current Behavior

ERROR: The certificate of '<website>' is not trusted.
ERROR: The certificate of '<website>' doesn't have a known issuer.

Possible Solution

Updating the certificate list to include this. So far

Steps to Reproduce

docker run -it node:lts wget "https://...<website with SSL.com root cert>..."

Additional Information

the lts-alpine image is not affected and uses a more recent (1.25) version of wget

[yosifkit]

This sounds like https://gitlab.alpinelinux.org/alpine/ca-certificates/-/issues/6 and so was fixed by docker-library/official-images#18206 and the resulting rebuild of all Docker Official Images FROM alpine:*.

[LaurentGoderre]

@yosifkit that's what I thought too but his issue is with the Debian variant, not the alpine one