fixup! fix(@angular/build): resolve dev-server sslKey and sslCert relative to the workspace root

Author: MeAkib

packages/angular/build/src/builders/dev-server/options.ts

@@ -147,8 +147,8 @@ export async function normalizeOptions(
     proxyConfig,
     servePath,
     ssl,
-    sslCert: sslCert && path.join(workspaceRoot, sslCert),
-    sslKey: sslKey && path.join(workspaceRoot, sslKey),
+    sslCert: sslCert && path.resolve(workspaceRoot, sslCert),
+    sslKey: sslKey && path.resolve(workspaceRoot, sslKey),
     // Prebundling defaults to true but requires caching to function
     prebundle: cacheOptions.enabled && !optimization.scripts && prebundle,
     inspect,

packages/angular/build/src/builders/dev-server/tests/options/ssl_spec.ts

@@ -6,6 +6,9 @@
  * found in the LICENSE file at https://angular.dev/license
  */
 
+import assert from 'node:assert';
+import { mkdtemp, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
 import { executeDevServer } from '../../index';
 import { describeServeBuilder } from '../jasmine-helpers';
 import { BASE_OPTIONS, DEV_SERVER_BUILDER_INFO } from '../setup';
@@ -55,5 +58,27 @@ describeServeBuilder(executeDevServer, DEV_SERVER_BUILDER_INFO, (harness, setupT
       expect(result?.success).toBeTrue();
       expect(result?.baseUrl).toMatch(/^https:\/\/[^/]+:\d+\//);
     });
+
+    it('supports absolute "sslKey" and "sslCert" paths outside the workspace', async () => {
+      const baseTmpDir = process.env['TEST_TMPDIR'];
+      assert(baseTmpDir, 'TEST_TMPDIR is not set');
+      const certsDir = await mkdtemp(join(baseTmpDir, 'angular-cli-ssl-'));
+      const sslKey = join(certsDir, 'server.key');
+      const sslCert = join(certsDir, 'server.crt');
+      await writeFile(sslKey, SSL_KEY);
+      await writeFile(sslCert, SSL_CERT);
+
+      harness.useTarget('serve', {
+        ...BASE_OPTIONS,
+        ssl: true,
+        sslKey,
+        sslCert,
+      });
+
+      const { result } = await harness.executeOnce();
+
+      expect(result?.success).toBeTrue();
+      expect(result?.baseUrl).toMatch(/^https:\/\/[^/]+:\d+\//);
+    });
   });
 });