Security: Update bundled Root Certificates.

Browse Source

The Root Certificate bundle maintained by Mozilla ships in WordPress to allow SSL certificates to be verified on hosts with incomplete, outdated, or invalid local SSL configurations.

This updates the `ca-bundle.crt` file to the latest version, which applies upstream changes from the bundle maintained by Mozilla and keeps all unexpired legacy 1024bit certificates which are kept for backward compatibility purposes (see [35919]).

Partially merges [59740] and [59969] to the 5.8 branch.

Props johnbillion, desrosj, whyisjake, ayeshrajans, SergeyBiryukov, swissspidy, skithund, barry.
See #62811, #62711.

git-svn-id: https://develop.svn.wordpress.org/branches/5.8@60002 602fd350-edb4-49c9-b593-d223f7449a82

...

This commit is contained in:

Jonathan Desrosiers 2025-03-16 23:01:50 +00:00

parent 6059d97d60

commit 4c9cb0c3cc

1 changed files with 1306 additions and 1223 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2529

src/wp-includes/certificates/ca-bundle.crt

File diff suppressed because it is too large Load Diff