How asheroto/updaterootcertificates works
UpdateRootCertificates is a Windows root-certificate trust-store updater. Its main workflow obtains Microsoft's trusted-root list, extracts and parses it, retrieves the listed certificates, and writes them to the Windows registry; an offline mode separates downloading from applying certificates. The graph follows the documented capabilities and sampled entry-point and processing code; unsampled CLI dispatch details are not expanded.
Main entry points: UpdateRootCertificates.py Trusted-root processing
Components 14
Application flow
- CLI and modes
UpdateRootCertificates.py - Online entry point
UpdateRootCertificates.py - Offline apply
UpdateRootCertificates.py
Trust-list processing
- Trusted-root processing
UpdateRootCertificates.py - CAB extraction
UpdateRootCertificates.py - CTL parsing
UpdateRootCertificates.py - Certificate retrieval
UpdateRootCertificates.py - Offline certificate saving
UpdateRootCertificates.py
System integrations
- Local certificate files
- Windows root store
- Update log
UpdateRootCertificates.py
Other components
- Operator
- Microsoft certificate CDN
- Windows expand.exe
Connections 18
- Operator → CLI and modes: selects mode
- CLI and modes → Online entry point: starts online run
- CLI and modes → Offline apply: selects source
- Online entry point → Trusted-root processing: calls
- Trusted-root processing → Microsoft certificate CDN: downloads trust list
- Trusted-root processing → CAB extraction: extracts CAB
- CAB extraction → Windows expand.exe: invokes
- Trusted-root processing → CTL parsing: parses CTL
- CTL parsing → Trusted-root processing: returns thumbprints
- Trusted-root processing → Microsoft certificate CDN: fetches certificates
- Trusted-root processing → Windows root store: writes certificates
- Trusted-root processing → Offline certificate saving: saves downloaded files
- Offline certificate saving → Local certificate files: writes files
- Offline apply → Local certificate files: reads source files
- Offline apply → CAB extraction: extracts local CAB
- Offline apply → CTL parsing: parses trust list
- Offline apply → Windows root store: writes certificates
- Online entry point → Update log: writes log