From cc750b71a15fce6fc825544fd9008ea3de4288cd Mon Sep 17 00:00:00 2001
From: Ben Noordhuis <info@bnoordhuis.nl>
Date: Fri, 19 Oct 2018 23:39:46 +0200
Subject: [PATCH] doc: NODE_EXTRA_CA_CERTS is ignored if setuid root

Fixes: https://github.com/nodejs/node/issues/22081

PR-URL: https://github.com/nodejs/node/pull/23770
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Richard Lau <riclau@uk.ibm.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Refael Ackermann <refack@gmail.com>
---
 doc/api/cli.md | 3 +++
 doc/node.1     | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/doc/api/cli.md b/doc/api/cli.md
index 06270219db01b0..b6e42a5bc8100d 100644
--- a/doc/api/cli.md
+++ b/doc/api/cli.md
@@ -525,6 +525,9 @@ malformed, but any errors are otherwise ignored.
 Note that neither the well known nor extra certificates are used when the `ca`
 options property is explicitly specified for a TLS or HTTPS client or server.
 
+This environment variable is ignored when `node` runs as setuid root or
+has Linux file capabilities set.
+
 ### `NODE_ICU_DATA=file`
 <!-- YAML
 added: v0.11.15
diff --git a/doc/node.1 b/doc/node.1
index ad46d58d1f39fd..4c97240ee716a6 100644
--- a/doc/node.1
+++ b/doc/node.1
@@ -302,6 +302,9 @@ If
 is missing or misformatted, a message will be emitted once using
 .Sy process.emitWarning() ,
 but any errors are otherwise ignored.
+.Pp
+This environment variable is ignored when `node` runs as setuid root or
+has Linux file capabilities set.
 .
 .It Ev NODE_ICU_DATA Ar file
 Data path for ICU (Intl object) data.