package ca-certs

You can search for identifiers within the package.

in-package search v0.2.0

Detect root CA certificates from the operating system

Install

dune-project

Dependency

github.com Readme Changelog ISC License Edit opam file Versions (4)

Authors

E

Etienne Millon <me@emillon.org>, Hannes Mehnert <hannes@mehnert.org>

Maintainers

E

Etienne Millon <me@emillon.org>

Sources

ca-certs-0.2.3.tbz

sha256=d2d8d6457d915ef6d783def82f3be5ec2f56f92e20214f58edd63c9c2fc60e9c

sha512=e945112be3b2f1fbcaeb95aebb600cd5119f1f05583ebcc0a4a20dd159d8cfec5adc3443aae678ee159c0e0c32b1d7c0ba3ba4405e3483e3f565e4d29d3da0f7

doc/ca-certs/Ca_certs/index.html

Module `Ca_certs`

val authenticator : 
  ?crls:X509.CRL.t list ->
  ?allowed_hashes:Mirage_crypto.Hash.hash list ->
  unit ->
  (X509.Authenticator.t, [> `Msg of string ]) result

authenticator ~crls ~allowed_hashes () detects the root CAs (trust anchors) in the operating system's trust store using trust_anchors. It constructs an authenticator with the current timestamp Ptime_clock.now, and the provided ~crls and ~allowed_hashes arguments. The resulting authenticator can be used for Tls.Config.client. Returns Error `Msg msg if detection did not succeed.

val trust_anchors : unit -> (string, [> `Msg of string ]) result

trust_anchors () detects the root CAs (trust anchors) in the operating system's trust store. On Unix systems, if the environment variable SSL_CERT_FILE is set, its value is used as path to the trust anchors. Otherwise, if NIX_SSL_CERT_FILE is set, its value is used. The successful result is a list of pem-encoded X509 certificates.