Make WordPress Core

Opened 11 years ago

Closed 11 years ago

#27017 closed task (blessed) (fixed)

Time to update the HTTP SSL Root Certificate list

Reported by: dd32's profile dd32 Owned by: dd32's profile dd32
Milestone: 3.9 Priority: normal
Severity: normal Version:
Component: HTTP API Keywords: has-patch commit
Focuses: Cc:

Description

In #25007 we added a static set of root certificates for usage with WP_HTTP as hosts certificates were often out of date.

In order for us to not end up in the same boat, we need to keep our certificate file up to date.

Attached is a diff, below are the commands I ran to generate it.

[wordpress-develop]# wget https://raw2.github.com/bagder/curl/master/lib/mk-ca-bundle.pl
[wordpress-develop]# chmod +x mk-ca-bundle.pl
[wordpress-develop]# ./mk-ca-bundle.pl src/wp-includes/certificates/ca-bundle.crt
Done (150 CA certs processed, 37 untrusted skipped).

I then manually applied r25569 by moving that same certificate higher in the file (I couldn't get svn merge to do it..)

Attachments (1)

27017.diff (33.5 KB) - added by dd32 11 years ago.

Download all attachments as: .zip

Change History (4)

@dd32
11 years ago

#1 @nacin
11 years ago

Sounds good to me.

#2 @nacin
11 years ago

  • Keywords commit added

Leaving this for dd32.

#3 @dd32
11 years ago

  • Owner set to dd32
  • Resolution set to fixed
  • Status changed from new to closed

In 27307:

WP_HTTP: Update the Root Certificate bundle used for SSL communication by WP_HTTP.
This file has been generated from the latest mozilla release NSS.
Fixes #27017

Note: See TracTickets for help on using tickets.