When node.js is being build with an external OpenSSL (shared linking) the option '--openssl-use-def-ca-store' ensures that OpenSSL uses the system truststore managed by certctl(8). If the bundled OpenSSL is used node.js comes also bundled with a Mozilla CA bundle as well. In any case security/ca_root_nss is not required. PR: 291482 Approved by: sunpoet (maintainer)