Source file `ca_certs_nss.ml`

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
let trust_anchors =
  List.fold_left
    (fun acc data ->
       Result.bind acc (fun acc ->
           Result.map
             (fun cert -> cert :: acc)
             (X509.Certificate.decode_der data)))
    (Ok []) Trust_anchor.certificates

let authenticator =
  let time () = Some (Mirage_ptime.now ()) in
  fun ?crls ?allowed_hashes () ->
    Result.map
      (X509.Authenticator.chain_of_trust ~time ?crls ?allowed_hashes)
      trust_anchors