Skip to content

Commit 40d450d

Browse files
committed
Merge branch 'update/update_cmn_crt_authorities_csv' into 'master'
Update common cert authorities csv See merge request espressif/esp-idf!35141
2 parents 82c26fd + 24be50e commit 40d450d

File tree

3 files changed

+6
-5
lines changed

3 files changed

+6
-5
lines changed

components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -15,9 +15,9 @@ DigiCert,DigiCert High Assurance EV Root CA
1515
DigiCert,DigiCert TLS ECC P384 Root G5
1616
DigiCert,DigiCert TLS RSA4096 Root G5
1717
DigiCert,DigiCert Trusted Root G4
18-
GlobalSign nv-sa,GlobalSign Root CA - R3
19-
GlobalSign nv-sa,GlobalSign ECC Root CA - R5
2018
GlobalSign nv-sa,GlobalSign Root CA - R6
19+
GlobalSign nv-sa,GlobalSign ECC Root CA - R5
20+
GlobalSign nv-sa,GlobalSign Root CA - R3
2121
GlobalSign nv-sa,GlobalSign Root CA
2222
GlobalSign nv-sa,GlobalSign Root E46
2323
GlobalSign nv-sa,GlobalSign Root R46
@@ -30,13 +30,14 @@ Google Trust Services LLC,GTS Root R1
3030
Google Trust Services LLC,GTS Root R2
3131
Google Trust Services LLC,GTS Root R3
3232
Google Trust Services LLC,GTS Root R4
33-
"IdenTrust Services, LLC",DST Root CA X3
3433
"IdenTrust Services, LLC",IdenTrust Commercial Root CA 1
3534
"IdenTrust Services, LLC",IdenTrust Public Sector Root CA 1
3635
Internet Security Research Group,ISRG Root X1
3736
Internet Security Research Group,ISRG Root X2
3837
Sectigo,COMODO Certification Authority
3938
Sectigo,COMODO ECC Certification Authority
4039
Sectigo,COMODO RSA Certification Authority
40+
Sectigo,Sectigo Public Server Authentication Root E46
41+
Sectigo,Sectigo Public Server Authentication Root R46
4142
Sectigo,USERTrust ECC Certification Authority
4243
Sectigo,USERTrust RSA Certification Authority

docs/en/api-reference/protocols/esp_crt_bundle.rst

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ The bundle comes with the complete list of root certificates from Mozilla's NSS
1717
When generating the bundle you may choose between:
1818

1919
* The full root certificate bundle from Mozilla, containing more than 130 certificates. The current bundle was updated Tue Nov 26 13:58:25 2024 GMT.
20-
* A pre-selected filter list of the name of the most commonly used root certificates, reducing the amount of certificates to around 41 while still having around 90% absolute usage coverage and 99% market share coverage according to SSL certificate authorities statistics.
20+
* A pre-selected filter list of the name of the most commonly used root certificates, reducing the amount of certificates to around 42 while still having around 93% absolute usage coverage and 99% market share coverage according to SSL certificate authorities statistics.
2121

2222
In addition, it is possible to specify a path to a certificate file or a directory containing certificates which then will be added to the generated bundle.
2323

docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ ESP x509 证书包 API 提供了一种简便的方法,帮助你安装自定义
1717
生成证书包时,你需选择:
1818

1919
* 来自 Mozilla 的完整根证书包,包含超过 130 份证书。目前提供的证书包更新于 2024 年 11 月 26 日,星期一, 13:58:25 (GMT)。
20-
* 一组预先筛选的常用根证书。其中仅包含约 41 份证书,但根据 SSL 证书颁发机构统计数据,其绝对使用率约达到 90%,市场覆盖率约达 99%。
20+
* 一组预先筛选的常用根证书。其中仅包含约 42 份证书,但根据 SSL 证书颁发机构统计数据,其绝对使用率约达到 93%,市场覆盖率约达 99%。
2121

2222
此外,还可指定证书文件的路径或包含证书的目录,将其他证书添加到生成的证书包中。
2323

0 commit comments

Comments
 (0)