This workspace contains the crates webpki-roots
, webpki-root-certs
and webpki-ccadb
.
The webpki-roots
crate contains Mozilla's trusted root certificates for use with
the webpki or rustls crates.
The webpki-root-certs
is similar to webpki-roots
, but for use with other projects
that require the full self-signed X.509 certificate for each trusted root. This is
unnecessary overhead for webpki
and rustls
and you should prefer using
webpki-roots
for these projects.
The webpki-ccadb
crate populates the root certificates for the webpki-roots crate
using the data provided by the Common CA Database (CCADB).
Inspired by certifi.io.
These libraries are suitable for use in applications that can always be recompiled and instantly deployed. For applications that are deployed to end-users and cannot be recompiled, or which need certification before deployment, consider a library that uses the platform native certificate verifier such as rustls-platform-verifier. This has the additional benefit of supporting OS provided CA constraints and revocation data.
The underlying data is MPL-licensed, and the data in webpki-roots
and webpki-root-certs
is therefore a derived work.