File: root_unix.go

package info (click to toggle)
golang-github-cloudflare-cfssl 1.6.5-2
  • links: PTS, VCS
  • area: main
  • in suites: sid, trixie
  • size: 6,220 kB
  • sloc: asm: 1,936; javascript: 652; makefile: 94; sql: 89; sh: 64; python: 11
file content (54 lines) | stat: -rw-r--r-- 1,293 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
// Copyright 2011 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

//go:build dragonfly || freebsd || linux || nacl || netbsd || openbsd || solaris
// +build dragonfly freebsd linux nacl netbsd openbsd solaris

package system

import (
	"crypto/x509"
	"os"
)

// Possible directories with certificate files; stop after successfully
// reading at least one file from a directory.
var certDirectories = []string{
	"/system/etc/security/cacerts", // Android
}

func initSystemRoots() []*x509.Certificate {
	var roots []*x509.Certificate
	for _, file := range certFiles {
		data, err := os.ReadFile(file)
		if err == nil {
			roots, _ = appendPEM(roots, data)
			return roots
		}
	}

	for _, directory := range certDirectories {
		fis, err := os.ReadDir(directory)
		if err != nil {
			continue
		}
		rootsAdded := false
		for _, fi := range fis {
			var ok bool
			data, err := os.ReadFile(directory + "/" + fi.Name())
			if err == nil {
				if roots, ok = appendPEM(roots, data); ok {
					rootsAdded = true
				}
			}
		}
		if rootsAdded {
			return roots
		}
	}

	// All of the files failed to load. systemRoots will be nil which will
	// trigger a specific error at verification time.
	return nil
}