mirror of
https://github.com/SagerNet/sing-box.git
synced 2026-04-14 12:48:28 +10:00
cba18635c8
Adds `chrome` as a new certificate store option alongside `mozilla`. Both stores filter out China-based CA certificates.
60 lines
1.6 KiB
Markdown
60 lines
1.6 KiB
Markdown
---
|
|
icon: material/new-box
|
|
---
|
|
|
|
!!! question "Since sing-box 1.12.0"
|
|
|
|
!!! quote "Changes in sing-box 1.13.0"
|
|
|
|
:material-plus: [Chrome Root Store](#store)
|
|
|
|
# Certificate
|
|
|
|
### Structure
|
|
|
|
```json
|
|
{
|
|
"store": "",
|
|
"certificate": [],
|
|
"certificate_path": [],
|
|
"certificate_directory_path": []
|
|
}
|
|
```
|
|
|
|
!!! note ""
|
|
|
|
You can ignore the JSON Array [] tag when the content is only one item
|
|
|
|
### Fields
|
|
|
|
#### store
|
|
|
|
The default X509 trusted CA certificate list.
|
|
|
|
| Type | Description |
|
|
|--------------------|----------------------------------------------------------------------------------------------------------------|
|
|
| `system` (default) | System trusted CA certificates |
|
|
| `mozilla` | [Mozilla Included List](https://wiki.mozilla.org/CA/Included_Certificates) with China CA certificates removed |
|
|
| `chrome` | [Chrome Root Store](https://g.co/chrome/root-policy) with China CA certificates removed |
|
|
| `none` | Empty list |
|
|
|
|
#### certificate
|
|
|
|
The certificate line array to trust, in PEM format.
|
|
|
|
#### certificate_path
|
|
|
|
!!! note ""
|
|
|
|
Will be automatically reloaded if file modified.
|
|
|
|
The paths to certificates to trust, in PEM format.
|
|
|
|
#### certificate_directory_path
|
|
|
|
!!! note ""
|
|
|
|
Will be automatically reloaded if file modified.
|
|
|
|
The directory path to search for certificates to trust,in PEM format.
|