Security: Update bundled Root Certificates.

Browse Source

The Root Certificate bundle maintained by Mozilla ships in WordPress to allow SSL certificates to be verified on hosts with incomplete, outdated, or invalid local SSL configurations.

This updates the `ca-bundle.crt` file to the latest version, which applies upstream changes from the bundle maintained by Mozilla and keeps all unexpired legacy 1024bit certificates which are kept for backward compatibility purposes (see [35919]).

Partially merges [37431], [46094], [58707], [59740] and [59969] to the 4.5 branch.

Props johnbillion, desrosj, whyisjake, ayeshrajans, SergeyBiryukov, swissspidy, skithund, barry, paragoninitiativeenterprises, ocean90, DrewAPicture.
See #62811, #62711, #50828, #45807, #36835.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@60025 602fd350-edb4-49c9-b593-d223f7449a82

...

This commit is contained in:

Jonathan Desrosiers 2025-03-17 16:48:25 +00:00

parent 9f403eccd9

commit 029adc6b6d

1 changed files with 2076 additions and 2701 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4777

src/wp-includes/certificates/ca-bundle.crt

File diff suppressed because it is too large Load Diff