{
  "slug": "k6-tlsaiafetch-retrieves-missing-tls-certificates-32cee8d158cf",
  "title": "k6 tlsAIAFetch retrieves missing TLS certificates",
  "tools": [
    "k6"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-09-21T15:17:03.000Z",
  "announced_at": "2026-09-21T15:17:03.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "If an HTTPS test fails because the server omits an intermediate certificate, set `tlsAIAFetch: true` in the k6 options to fetch it while verifying the TLS chain.",
    "examples": [
      "export const options = {\n  tlsAIAFetch: true,\n};"
    ],
    "gotchas": [
      "Version: v2.3.0",
      "tlsAIAFetch: Boolean; defaults to `false`. When enabled, follows the certificate’s AIA extension to fetch missing intermediate CA certificates over HTTP. Has no effect when `insecureSkipTLSVerify` is enabled.",
      "Prerequisite: Introduced in k6 v2.3.0; opt-in.",
      "Opt-in; works with HTTP and gRPC connections."
    ]
  },
  "why_it_matters": "When debugging an HTTPS test that fails because a server omits an intermediate certificate, configure k6 to fetch the missing certificate.",
  "sources": [
    "https://github.com/grafana/k6/releases/tag/v2.3.0",
    "https://grafana.com/docs/k6/latest/using-k6/k6-options/reference/"
  ],
  "rank": 0.96031,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave2a-20261017",
    "verdict_id": "wave2a-20261017:wave2a-20261017-65a244af489b5976-3:gate",
    "evidence_hash": "dba6ea361338a6ce929886692010d6448197e9e669546fe9ff9e6f7cea7e9e36"
  },
  "review": {
    "draft_hash": "1998e0536e964efb38763349033712243ccc28c97be7fd1e9b55baab2970889a",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave2a-20261017:gate",
    "reason": "3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.96 >= 0.9; 2 needed) and Jev gave 0.71 (>= 0.6 needed)."
  }
}