unikernel/duniverse/ca-certs-nss/lib/ca_certs_nss.ml

@@ -0,0 +1,15 @@
+let trust_anchors =
+  List.fold_left
+    (fun acc data ->
+       Result.bind acc (fun acc ->
+           Result.map
+             (fun cert -> cert :: acc)
+             (X509.Certificate.decode_der data)))
+    (Ok []) Trust_anchor.certificates
+
+let authenticator =
+  let time () = Some (Mirage_ptime.now ()) in
+  fun ?crls ?allowed_hashes () ->
+    Result.map
+      (X509.Authenticator.chain_of_trust ~time ?crls ?allowed_hashes)
+      trust_anchors