silk.tls.trust_source_windows.

When to use#

Provide WindowsRootTrustSource explicitly when a TLS client should trust certificates in the Windows logical ROOT store, including machine roots exposed through that store.

Details#

Each load opens the existing store read-only, copies every certificate, and closes the store. Snapshots own their certificates. Enumeration order is unspecified, and the store may change during enumeration. A malformed certificate fails the whole load; none are silently skipped.

Gotchas#

This imports certificate anchors, not Windows chain-engine policy. It does not import store properties, usage restrictions, the disallowed store, revocation policy, or automatic root updates. Silk's TLS verifier checks the resulting chain. The provider is available on Windows x86_64 MSVC and is never installed implicitly.

Import as WindowsRootTrustSource with import silk.tls.trust_source_windows { WindowsRootTrustSource }.

Public declarations: 1.

WindowsRootTrustSource#

pub struct WindowsRootTrustSource

A TrustSource that reads the current user's logical Windows ROOT certificate store.

Details#

Each load opens the existing store read-only and copies every certificate into an owned snapshot. Machine roots visible in that logical store are included. No snapshot is cached. Input bytes, DER bytes, certificate counts, and anchor limits apply to the whole enumeration. A malformed certificate or native store failure fails the entire load.

Gotchas#

Windows x86_64 MSVC only. This imports certificates, not Windows chain-engine policy, store properties, usage restrictions, disallowed-store entries, revocation, or automatic updates. Enumeration is not atomic against external store changes. Provide this source explicitly; no default trust source is installed.

Implementation WindowsRootTrustSource#

impl WindowsRootTrustSource

Associated function make#

pub fn make() -> Self

Returns a provider for the Windows logical ROOT store without opening it.

The provider reads the current user's store at each load, including machine roots visible through it. It is available only on Windows x86_64 MSVC.

Implementation TrustSource for WindowsRootTrustSource#

impl TrustSource for WindowsRootTrustSource

Operation load#

load: WindowsRootTrustSource.loadCurrent

Category: TLS and certificates.

Profiles: x86_64-pc-windows-msvc.