Make WordPress Core

Opened 13 years ago

Closed 13 years ago

#27017 closed task (blessed) (fixed)

Time to update the HTTP SSL Root Certificate list

Reported by: dd32 Owned by: dd32
Priority: normal Milestone: 3.9
Component: HTTP API Version:
Severity: normal Keywords: has-patch commit
Cc: Focuses:

Description

In #25007 we added a static set of root certificates for usage with WP_HTTP as hosts certificates were often out of date.

In order for us to not end up in the same boat, we need to keep our certificate file up to date.

Attached is a diff, below are the commands I ran to generate it.

[wordpress-develop]# wget https://raw2.github.com/bagder/curl/master/lib/mk-ca-bundle.pl
[wordpress-develop]# chmod +x mk-ca-bundle.pl
[wordpress-develop]# ./mk-ca-bundle.pl src/wp-includes/certificates/ca-bundle.crt
Done (150 CA certs processed, 37 untrusted skipped).

I then manually applied r25569 by moving that same certificate higher in the file (I couldn't get svn merge to do it..)

Attachments (1)

27017.diff​ (33.5 KB ) - added by dd32 13 years ago.

Download all attachments as: .zip

Change History (4)

@dd32
13 years ago

#1 @nacin
13 years ago

Sounds good to me.

#2 @nacin
13 years ago

  • Keywords commit added

Leaving this for dd32.

#3 @dd32
13 years ago

  • Owner set to dd32
  • Resolution → fixed
  • Status new → closed

In 27307:

WP_HTTP: Update the Root Certificate bundle used for SSL communication by WP_HTTP.
This file has been generated from the latest mozilla release NSS.
Fixes #27017

Note: See TracTickets for help on using tickets.