Make WordPress Core

Opened 10 years ago

Closed 10 years ago

#27017 closed task (blessed) (fixed)

Time to update the HTTP SSL Root Certificate list

Reported by: dd32's profile dd32 Owned by: dd32's profile dd32
Milestone: 3.9 Priority: normal
Severity: normal Version:
Component: HTTP API Keywords: has-patch commit
Focuses: Cc:

Description

In #25007 we added a static set of root certificates for usage with WP_HTTP as hosts certificates were often out of date.

In order for us to not end up in the same boat, we need to keep our certificate file up to date.

Attached is a diff, below are the commands I ran to generate it.

[wordpress-develop]# wget https://raw2.github.com/bagder/curl/master/lib/mk-ca-bundle.pl
[wordpress-develop]# chmod +x mk-ca-bundle.pl
[wordpress-develop]# ./mk-ca-bundle.pl src/wp-includes/certificates/ca-bundle.crt
Done (150 CA certs processed, 37 untrusted skipped).

I then manually applied r25569 by moving that same certificate higher in the file (I couldn't get svn merge to do it..)

Attachments (1)

27017.diff (33.5 KB) - added by dd32 10 years ago.

Download all attachments as: .zip

Change History (4)

@dd32
10 years ago

#1 @nacin
10 years ago

Sounds good to me.

#2 @nacin
10 years ago

  • Keywords commit added

Leaving this for dd32.

#3 @dd32
10 years ago

  • Owner set to dd32
  • Resolution set to fixed
  • Status changed from new to closed

In 27307:

WP_HTTP: Update the Root Certificate bundle used for SSL communication by WP_HTTP.
This file has been generated from the latest mozilla release NSS.
Fixes #27017

Note: See TracTickets for help on using tickets.