package ca-certs

  1. Overview
  2. Docs
Detect root CA certificates from the operating system

Install 

dune-project
 Dependency

github.com Readme Changelog ISC License Edit opam file Versions (4)

Authors

  1. E
    Etienne Millon <me@emillon.org>, Hannes Mehnert <hannes@mehnert.org>

Maintainers

  1. E
    Etienne Millon <me@emillon.org>

Sources

ca-certs-1.0.3.tbz
sha256=02dfc9e7770b18218df2e251192711dd44c5858ad24575693b145ab3d7d41c29
sha512=9bccb294307a7e6dc7cc54e7c705ad55046033265c6e5f8459d2e34781f662acd7927d9aff1eece43d5816ddae41dcd3495b6e77d08e8470e57aef1b9c47692f

doc/CHANGES.html

v1.0.3 (2025-05-07)

  • Remove extended-validation.badssl.com test case (which used a digicert signed certificate that got its website trust bit removed in NSS 3.123) @mtelvers and others https://github.com/ocaml/opam-repository/pull/29852#issuecomment-4386895683

v1.0.2 (2026-05-05)

  • Support DragonFlyBSD (#39 @mneumann)

v1.0.1 (2025-04-15)

  • Add OCAML_EXTRA_CA_CERTS env variable (#30 @art-w)
  • macOS: add additional keychain path /Library/Keychains/System.keychain (#28 @ajbt200128)
  • Demote log levels of trust anchor parsing failures (now on the debug level), log a single warning message how many failures occured (#36 @Julow)

v1.0.0 (2024-08-06)

  • Use X509.Certificate.fold_decode_pem, available in x509 1.0.0 (#34 #35 @art-w @hannesm)
  • Remove usage of cstruct, update to x509 1.0.0 and mirage-crypto 1.0.0 API (#32 @dinosaure @hannesm)
  • Remove astring dependency (#26 @hannesm)

v0.2.3 (2022-09-02)

  • Respect the environment variable SSL_CERT_FILE as well (suggested in #22 by @Konubinix, fixed in #23 by @hannesm, ok'ed by @sternenseemann)
  • Update tests for recent alpine releases (#24 @hannesm, likely fixes #21)

v0.2.2 (2021-10-27)

  • Filter trailing certificate (if the data does not contain "-----BEGIN CERTIFICATE-----", it won't be a certificate) (#19 @hannesm)
  • Avoid deprecated functions from fmt (#19 @hannesm)
  • Remove rresult dependency (#19 @hannesm)
  • Update GitHub actions (#19 @hannesm)

v0.2.1 (2021-04-22)

  • Update to X.509 0.13.0 API (#18, @hannesm)
  • Respect NIX_SSL_CERT_FILE environment variable to support NixOS builds (reported by @sternenseemann in #16, fix in #17 by @hannesm)

v0.2.0 (2021-03-05)

  • Add Windows support (#14, @emillon)

v0.1.3 (2020-11-17)

  • Allow some certificates to fail decoding (#11, reported by @mattpallissard in mirleft/ocaml-x509#137)

v0.1.2 (2020-10-12)

  • Revise API, avoid temporary file creation on macos

v0.1.1 (2020-10-11)

  • Revise test suite to not connect to the network (to please opam's sandbox), instead use hardcoded certificate chains.

v0.1.0 (2020-10-09)

  • Tested on macos, Debian GNU/Linux, Ubuntu, Gentoo, Alpine, CentOS/RHEL 7, OpenSUSE, FreeBSD, OpenBSD
  • Initial release