AddTrust External CA Root Certificate not recognized

[dannydehaan]

Hi all,

At our server, we are using the PositiveSSL CA 2 certificate by Comodo. When a wp_remote_get request is made, the server tries to verify the SSL certificate by wp-includes/certificates/ca-bundle.crt. AddTrust doesn't exist in this file so the verifyssl is false. We've discovered this in the W3 Total Cache plugin when we tried to activate minify and page cache.

Best,
Danny

[dannydehaan]

26955 Added Certificate

[dd32]

Can you please provide a URL which uses a certificate signed by this AddTrust certificate, and the source of the attached certificate?

We use the Mozilla NSS trusted certificates, and although I see the following certificates in there, I don't see the one you're requesting:

AddTrust Low-Value Services Root TRUSTED
AddTrust External Root TRUSTED
AddTrust Public Services Root TRUSTED
AddTrust Qualified Certificates Root TRUSTED

It looks like the "External Root" one is issued by "AddTrust External CA Root" though.

See Also: #27017 which doesn't include this certificate.

[dannydehaan]

Hi dd32,

Thanks for your reply!

Please see ​https://www.haboes.nl/trac-example/ for the certificate being used. It's a wildcard (sub)domain certficate.

I've downloaded the certificate from here: ​https://support.comodo.com/index.php?_m=downloads&_a=view&parentcategoryid=4. It's the 2nd download.

[dd32]

Marking as a duplicate of #30434 - If that doesn't fix it, I'm not sure what's going on.

The referenced site here has had it's cert expire, so I can't verify if that ticket fixed it.