--allow-openssl-store

在使用 权限模型 时，默认情况下该过程无法使用 OpenSSL STORE 加载器，例如从传递给 crypto.createPrivateKey() 的 <URL> 中加载私钥。尝试这样做会抛出 ERR_ACCESS_DENIED，除非用户明确传递 --allow-openssl-store 标志。这个权限可以在运行时通过 permission.drop() 放弃。

🌐 When using the Permission Model, the process will not be able to use OpenSSL STORE loaders by default, for example to load a private key from a <URL> passed to crypto.createPrivateKey(). Attempts to do so will throw an ERR_ACCESS_DENIED unless the user explicitly passes the --allow-openssl-store flag. This permission can be dropped at runtime via permission.drop().

这个标志赋予已配置的 OpenSSL STORE 加载器广泛的权限。加载器可以访问文件、设备、令牌或网络。加载器执行的访问不受 fs.read、fs.write 或 net 权限范围的限制。

🌐 This flag grants broad authority to configured OpenSSL STORE loaders. A loader may access files, devices, tokens, or the network. Access performed by a loader is not constrained by the fs.read, fs.write, or net permission scopes.