Crate chromium_roots 

Static classical X.509 TLS trust anchors from the Chromium Root Store.

Cargo generates the data from an authenticated Chrome PKI Metadata snapshot maintained by the sibling maintenance crate. Generated provenance records the exact component, requesting Chrome version, and content hashes. The shared generator validates every signed X.509 certificate and Trust Anchor ID, and preserves Chrome-specific constraints in the generated constants.

This crate preserves Chromium’s Root Store data but does not implement Chromium’s complete certificate verifier. Consumers that need Chrome-equivalent verification must enforce RootConstraint and the anchor enforcement flags.

Structs

RootConstraint

A set of Chrome-specific conditions that must all hold for an anchor.

TrustAnchor

Metadata for one classical X.509 TLS trust anchor.

Enums

TrustAnchorKind

Identifies where an anchor appears in Chromium’s Root Store data.

Constants

ROOT_STORE_VERSION

Chrome Root Store major version used by this snapshot.

SOURCE_BROWSER_VERSION

Chrome Stable version used to request the component.

SOURCE_COMPONENT_ID

Chrome PKI Metadata component ID used for this snapshot.

SOURCE_COMPONENT_VERSION

Chrome PKI Metadata component version used for this snapshot.

SOURCE_CRS_SHA256

SHA-256 of the serialized root-store payload.

SOURCE_CRX_SHA256

SHA-256 of the verified CRX3 package.

TLS_SERVER_ROOT_CERTS

Classical X.509 certificates trusted for TLS by this Root Store snapshot.

TLS_TRUST_ANCHORS

Chromium TLS trust anchors and their source metadata.

Functions

encoded_trust_anchor_ids

Returns one-byte-length-prefixed Trust Anchor IDs in Chromium source order.

trust_anchor_id_for_certificate

Returns the published Trust Anchor ID associated with an exact certificate DER match.

trust_anchor_ids

Returns all published Trust Anchor IDs in Chromium source order.