mte/unikernel/duniverse/ca-certs-nss/lib/ca_certs_nss.mli
2025-11-11 02:07:51 +01:00

11 lines
506 B
OCaml

val trust_anchors : (X509.Certificate.t list, [> `Msg of string ]) result
(** [trust_anchors] are the trust anchors extracted from NSS certdata.txt. *)
val authenticator :
?crls:X509.CRL.t list ->
?allowed_hashes:Digestif.hash' list ->
unit ->
(X509.Authenticator.t, [> `Msg of string ]) result
(** [authenticator ~crls ~hash_whitelist ()] is an authenticator with the
provided revocation lists, and allowed_hashes. The trust anchors are based
on the extraction from NSS' certdata.txt. *)