From 1b21139d4e22396ec8f93c9c362181d964cadaa4 Mon Sep 17 00:00:00 2001
From: twentyOne2x <contact@attn.market>
Date: Wed, 15 Jul 2026 07:35:59 +0200
Subject: [PATCH] test: mirror runtime trust environment

---
 tests/test_hermes_leoclean_kb_bridge_source.py | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/tests/test_hermes_leoclean_kb_bridge_source.py b/tests/test_hermes_leoclean_kb_bridge_source.py
index 5eaa0ce..6022d2a 100644
--- a/tests/test_hermes_leoclean_kb_bridge_source.py
+++ b/tests/test_hermes_leoclean_kb_bridge_source.py
@@ -331,6 +331,10 @@ def _configure_runtime_environment(monkeypatch: pytest.MonkeyPatch) -> None:
                 "SSL_CERT_DIR",
                 "SSL_CERT_FILE",
                 "SSLKEYLOGFILE",
+                "OPENSSL_CONF",
+                "OPENSSL_ENGINES",
+                "OPENSSL_MODULES",
+                "GCONV_PATH",
             }
         ):
             monkeypatch.delenv(key, raising=False)
@@ -349,6 +353,8 @@ def test_runtime_environment_fixture_scrubs_github_runner_inheritance(
     monkeypatch.setenv("HTTP_PROXY", "http://runner-proxy.invalid:8080")
     monkeypatch.setenv("BASH_FUNC_runner%%", "() { :; }")
     monkeypatch.setenv("SSL_CERT_FILE", "/tmp/runner-ca.pem")
+    monkeypatch.setenv("OPENSSL_CONF", "/tmp/runner-openssl.cnf")
+    monkeypatch.setenv("GCONV_PATH", "/tmp/runner-gconv")
 
     _configure_runtime_environment(monkeypatch)