check for nil rootCAs

eternal-flame-AD · eternal-flame-AD · commit bfe8e528137f · 2025-09-03T16:28:10.000-05:00
Signed-off-by: eternal-flame-AD &lt;yume@yumechi.jp&gt;
diff --git a/v2/cli.go b/v2/cli.go
@@ -106,7 +106,9 @@ func (f *PluginCli) Kex(modulePath string, certPool *x509.CertPool) (certChain [
 			if err != nil {
 				return false, err
 			}
-			certPool.AddCert(parsedCert)
+			if certPool != nil {
+				certPool.AddCert(parsedCert)
+			}
 			certificateChain = append(certificateChain, tls.Certificate{
 				Certificate: [][]byte{block.Bytes},
 				Leaf:        parsedCert,
