nx_pem_loader.nx
buildroot/runtime/nx_pem_loader.nx
about
nx_pem_loader.nx -- load a PEM CA bundle into a TrustStore, bits-up.
module: nishi-core.search.pem_loader
depends: nx_str, nx_syscalls, nx_base64 (b64_decode), nx_x509 (x509_parse),
nx_x509_trust_store (trust_store_add)
capability: CORE_IO
wired_status: FULLY_WIRED
The missing piece for validated live HTTPS: turn the system PEM bundle
(/etc/ssl/certs/ca-certificates.crt -- concatenated -----BEGIN CERTIFICATE--
blocks) into a populated TrustStore. For each block: strip whitespace from
the base64, OUR b64_decode -> DER, OUR x509_parse -> X509Cert, trust_store_add.
Every step sovereign (our base64 + our X.509 parser). Pairs with nx_https_get
so the crawler can fetch + VALIDATE real HTTPS hosts.
dependencies 5 imports · 18 importers
diagram shows first 10 each side; +0 more imports, +8 more importers in the complete lists below.
imports: nx_str.nxnx_syscalls.nxnx_base64.nxnx_x509.nxnx_x509_trust_store.nx
imported by: _dlr_probe.nx_uj_probe.nx_wt_probe_one.nxnx_crawl_https.nxnx_diora_live_reach.nxnx_entity_media.nxnx_entity_seeds.nxnx_evidence_gather.nxnx_fetch_dump.nxnx_fetch_unit.nxnx_hls_get.nxnx_https_get_spoof.nxnx_live_https.nxnx_magnet_discover.nxnx_media_gather.nxnx_nist_unwall.nxnx_revimg_crawl_run.nxnx_video_get.nx
structs
| none |
consts
| none |
functions
| 23 | func _pem_find(hay: *u8, haylen: i64, from: i64, needle: *u8) -> i64 |
| 39 | func nx_pem_trust_load(pem: *u8, n: i64, store: *TrustStore) -> i64 called by 1: nx_pem_trust_load_file calls 6: nx_str_len_pem_findsys_mmapb64_decodex509_parsetrust_store_add |
| 84 | func nx_pem_trust_load_file(path: *u8, store: *TrustStore) -> i64 |