From 452ce3628176795d2ef820b9c0e42112b8be98d2 Mon Sep 17 00:00:00 2001
From: Divy Srivastava <dj.srivastava23@gmail.com>
Date: Fri, 31 Jan 2025 18:29:37 +0530
Subject: [PATCH] fix(cli): Fix panic in `load_native_certs` (#27863)

Fixes https://github.com/denoland/deno/issues/27528

Can't really trigger the panic myself hence no test.
---
 cli/lib/args.rs | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/cli/lib/args.rs b/cli/lib/args.rs
index 22bebdf5d9..0a5f120e1f 100644
--- a/cli/lib/args.rs
+++ b/cli/lib/args.rs
@@ -60,6 +60,8 @@ pub enum RootCertStoreLoadError {
   FailedAddPemFile(String),
   #[error("Failed opening CA file: {0}")]
   CaFileOpenError(String),
+  #[error("Failed to load platform certificates: {0}")]
+  FailedNativeCerts(String),
 }
 
 /// Create and populate a root cert store based on the passed options and
@@ -89,7 +91,9 @@ pub fn get_root_cert_store(
         root_cert_store.extend(webpki_roots::TLS_SERVER_ROOTS.to_vec());
       }
       "system" => {
-        let roots = load_native_certs().expect("could not load platform certs");
+        let roots = load_native_certs().map_err(|err| {
+          RootCertStoreLoadError::FailedNativeCerts(err.to_string())
+        })?;
         for root in roots {
           if let Err(err) = root_cert_store
             .add(rustls::pki_types::CertificateDer::from(root.0.clone()))