WordPress.org

Make WordPress Core

Opened 6 years ago

Closed 6 years ago

#27017 closed task (blessed) (fixed)

Time to update the HTTP SSL Root Certificate list

Reported by: dd32 Owned by: dd32
Milestone: 3.9 Priority: normal
Severity: normal Version:
Component: HTTP API Keywords: has-patch commit
Focuses: Cc:

Description

In #25007 we added a static set of root certificates for usage with WP_HTTP as hosts certificates were often out of date.

In order for us to not end up in the same boat, we need to keep our certificate file up to date.

Attached is a diff, below are the commands I ran to generate it.

[wordpress-develop]# wget https://raw2.github.com/bagder/curl/master/lib/mk-ca-bundle.pl
[wordpress-develop]# chmod +x mk-ca-bundle.pl
[wordpress-develop]# ./mk-ca-bundle.pl src/wp-includes/certificates/ca-bundle.crt
Done (150 CA certs processed, 37 untrusted skipped).

I then manually applied r25569 by moving that same certificate higher in the file (I couldn't get svn merge to do it..)

Attachments (1)

27017.diff (33.5 KB) - added by dd32 6 years ago.

Download all attachments as: .zip

Change History (4)

@dd32
6 years ago

#1 @nacin
6 years ago

Sounds good to me.

#2 @nacin
6 years ago

  • Keywords commit added

Leaving this for dd32.

#3 @dd32
6 years ago

  • Owner set to dd32
  • Resolution set to fixed
  • Status changed from new to closed

In 27307:

WP_HTTP: Update the Root Certificate bundle used for SSL communication by WP_HTTP.
This file has been generated from the latest mozilla release NSS.
Fixes #27017

Note: See TracTickets for help on using tickets.