Can someone with better Rust skills than my virtually nonexistent ones verify my understanding that ExternalTool downloads will respect the global

ca_certs_path

? AFAICT those downloads end up delegated to the

http_client

we construct in context.rs, but if someone could check my work…

it should, yes. created here: https://github.com/pantsbuild/pants/blob/952235a048e8af742367867b5b7ca21243d020b6/src/rust/engine/src/context.rs#L558-L565

Yeah, I know that http_client is good for other uses, just wanted to verify my understanding that it is in fact being used for ExternalTool downloads

it is.

Yep