Security: Update bundled Root Certificates.

Browse Source

🎵 60,000 certs on the wall. 60,000 certs. Take one down, pass it around, 59,999 certs on the wall. 🎵

The Root Certificate bundle maintained by Mozilla ships in WordPress to allow SSL certificates to be verified on hosts with incomplete, outdated, or invalid local SSL configurations.

This updates the `ca-bundle.crt` file to the latest version, which applies upstream changes from the bundle maintained by Mozilla and keeps all unexpired legacy 1024bit certificates which are kept for backward compatibility purposes (see [35919]).

This equals `alot` of certificates.

Partially merges [59740] and [59969] to the 6.0 branch.

Props johnbillion, desrosj, whyisjake, ayeshrajans, SergeyBiryukov, swissspidy, skithund, barry, joedolson.
Fixes #60000. See #62811, #62711.

git-svn-id: https://develop.svn.wordpress.org/branches/6.0@60000 602fd350-edb4-49c9-b593-d223f7449a82

...

This commit is contained in:

Jonathan Desrosiers 2025-03-16 22:59:20 +00:00

parent 700ad5922a

commit ed52e2ac94

1 changed files with 1306 additions and 1223 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2529

src/wp-includes/certificates/ca-bundle.crt

File diff suppressed because it is too large Load Diff