nodejs · legendecas · Aug 26, 2025 · joyeecheung · Aug 26, 2025
diff --git a/src/api/environment.cc b/src/api/environment.cc
@@ -1,4 +1,7 @@
 #include <cstdlib>
+#if HAVE_OPENSSL
+#include "crypto/crypto_util.h"
+#endif  // HAVE_OPENSSL
 #include "env_properties.h"
 #include "node.h"
 #include "node_builtins.h"
@@ -1004,6 +1007,11 @@ void DefaultProcessExitHandlerInternal(Environment* env, ExitCode exit_code) {
   // in node_v8_platform-inl.h
   uv_library_shutdown();
   DisposePlatform();
 if (!(flags & ProcessInitializationFlags::kNoInitializeNodeV8Platform)) { 
   V8::DisposePlatform(); 
   // uv_run cannot be called from the time before the beforeExit callback 
   // runs until the program exits unless the event loop has any referenced 
   // handles after beforeExit terminates. This prevents unrefed timers 
   // that happen to terminate during shutdown from being run unsafely. 
   // Since uv_run cannot be called, uv_async handles held by the platform 
   // will never be fully cleaned up. 
   per_process::v8_platform.Dispose(); 
 } 
 if (!(flags & ProcessInitializationFlags::kNoInitializeNodeV8Platform)) { 
   V8::DisposePlatform(); 
   // uv_run cannot be called from the time before the beforeExit callback 
   // runs until the program exits unless the event loop has any referenced 
   // handles after beforeExit terminates. This prevents unrefed timers 
   // that happen to terminate during shutdown from being run unsafely. 
   // Since uv_run cannot be called, uv_async handles held by the platform 
   // will never be fully cleaned up. 
   per_process::v8_platform.Dispose(); 
 } 
+
+#if HAVE_OPENSSL
+  crypto::CleanupCachedRootCertificates();
+#endif  // HAVE_OPENSSL
+
   Exit(exit_code);
 }