This workspace contains the crates webpki-roots and webpki-ccadb.

The webpki-roots crate contains Mozilla's root certificates for use with the webpki or rustls crates.

The webpki-ccadb crate populates the root certificates for the webpki-roots crate using the data provided by the Common CA Database (CCADB). Inspired by certifi.io.

The webpki-roots crate is inspired by certifi.io and uses the data provided by the Common CA Database (CCADB).

License

The underlying data is MPL-licensed, and webpki-roots/src/lib.rs is therefore a derived work.

Regenerating sources

Sources are generated in an integration test, in webpki-roots/tests/codegen.rs. The test will fail if the sources are out of date relative to upstream, and update webpki-roots/src/lib.rs if so. The code is generated in deterministic order so changes to the source should only result from upstream changes.