Skip to main content

load_root_keys

Function load_root_keys 

Source
pub fn load_root_keys(trust_dir: &Path) -> Vec<String>
Expand description

Load the set of pinned root public-key texts: the compiled-in roots plus any the operator placed in the user-owned <trust_dir>/roots.toml. These are the only keys ever trusted to authenticate an index; they are never read from a fetched index.

A missing or malformed roots.toml contributes no keys (fail-closed: we do not invent trust on error).