Allow dart pub to use client certificates for getting/publishing packages

[andrm]

dart pub uses TLS with server side certs to fetch packages and publish them. My company has a policy that mandates client certificates.

Is there a way to make dart use client certs? dart.io has SecurityContext which can be configured in such a way, we have used it successfully.

[jonasfj]

Is this for getting/publishing packages to private pub server?

For pub.dev I don't think it makes much sense, getting packages requires no authentication, and publishing can be authenticated with GCP service accounts (or github actions), see:
https://dart.dev/tools/pub/automated-publishing

For private pub servers the client does support authentication using tokens see:
https://dart.dev/tools/pub/cmd/pub-token
https://github.com/dart-lang/pub/blob/master/doc/repository-spec-v2.md#authentication

It's also possible to use pub behind an HTTP proxy:
https://dart.dev/tools/pub/troubleshoot#pub-get-fails-from-behind-a-corporate-firewall

I think there is an environment variable for adding custom certificates, but that's probably only relevant if you have self-signed server certificates.

I don't know that I would oppose an environment variable for specifying client certificates, but it'd would need to be sane, and such code would need to have a LOT of tests.