webpki-roots

This is a crate containing Mozilla's root certificates for use with the webpki or rustls crates.

This crate is inspired by certifi.io and uses the services provided by mkcert.org.

License

The underlying data is MPL-licensed, and src/lib.rs is therefore a derived work.

Regenerating sources

You will need python3 and curl.

Run build.py which will output a new version of src/lib.rs. You can now compare and audit. The code is generated in deterministic order so changes to the source should only result from upstream changes.