espressif/esp-idf
1
0
Fork 1
mirror of https://github.com/espressif/esp-idf.git synced 2025-07-30 02:37:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

change(mbedtls/crt_bundle): Update esp_cmn_crt_bundle certificates

Browse Source
This commit is contained in:
Espressif BOT
2025-06-01 11:00:24 +08:00
committed by harshal.patil
parent adcbdd7da4
commit da1842ea0f
3 changed files with 2 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv
View File

@ -17,12 +17,9 @@ DigiCert,DigiCert Trusted Root G4
GlobalSign nv-sa,GlobalSign ECC Root CA - R5
GlobalSign nv-sa,GlobalSign Root CA - R6
GlobalSign nv-sa,GlobalSign Root CA - R3
GlobalSign nv-sa,GlobalSign Root CA
GlobalSign nv-sa,GlobalSign Root E46
GlobalSign nv-sa,GlobalSign Root R46
GoDaddy,Go Daddy Class 2 CA
GoDaddy,Go Daddy Root Certificate Authority - G2
GoDaddy,Starfield Class 2 CA
GoDaddy,Starfield Root Certificate Authority - G2
Google Trust Services LLC,GlobalSign ECC Root CA - R4
Google Trust Services LLC,GTS Root R1
@ -33,7 +30,6 @@ Google Trust Services LLC,GTS Root R4
"IdenTrust Services, LLC",IdenTrust Public Sector Root CA 1
Internet Security Research Group,ISRG Root X1
Internet Security Research Group,ISRG Root X2
Sectigo,Comodo AAA Services root
Sectigo,COMODO Certification Authority
Sectigo,COMODO ECC Certification Authority
Sectigo,COMODO RSA Certification Authority

1 Owner Common Name or Certificate Name
17 GlobalSign nv-sa GlobalSign ECC Root CA - R5
18 GlobalSign nv-sa GlobalSign Root CA - R6
19 GlobalSign nv-sa GlobalSign Root CA - R3
GlobalSign nv-sa GlobalSign Root CA
20 GlobalSign nv-sa GlobalSign Root E46
21 GlobalSign nv-sa GlobalSign Root R46
GoDaddy Go Daddy Class 2 CA
22 GoDaddy Go Daddy Root Certificate Authority - G2
GoDaddy Starfield Class 2 CA
23 GoDaddy Starfield Root Certificate Authority - G2
24 Google Trust Services LLC GlobalSign ECC Root CA - R4
25 Google Trust Services LLC GTS Root R1
30 IdenTrust Services, LLC IdenTrust Public Sector Root CA 1
31 Internet Security Research Group ISRG Root X1
32 Internet Security Research Group ISRG Root X2
Sectigo Comodo AAA Services root
33 Sectigo COMODO Certification Authority
34 Sectigo COMODO ECC Certification Authority
35 Sectigo COMODO RSA Certification Authority

2
docs/en/api-reference/protocols/esp_crt_bundle.rst
View File

@ -17,7 +17,7 @@ The bundle comes with the complete list of root certificates from Mozilla's NSS
When generating the bundle you may choose between:
* The full root certificate bundle from Mozilla, containing more than 130 certificates. The current bundle was updated Tue May 20 03:12:02 2025 GMT.
* A pre-selected filter list of the name of the most commonly used root certificates, reducing the amount of certificates to around 42 while still having around 93% absolute usage coverage and 99% market share coverage according to SSL certificate authorities statistics.
* A pre-selected filter list of the name of the most commonly used root certificates, reducing the amount of certificates to around 38 while still having around 93% absolute usage coverage and 99% market share coverage according to SSL certificate authorities statistics.
In addition, it is possible to specify a path to a certificate file or a directory containing certificates which then will be added to the generated bundle.

2
docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst
View File

@ -17,7 +17,7 @@ ESP x509 证书包 API 提供了一种简便的方法，帮助你安装自定义
生成证书包时，你需选择：
* 来自 Mozilla 的完整根证书包，包含超过 130 份证书。目前提供的证书包更新于 2025 年 5 月 20 日，星期天, 03:12:02 (GMT)。
* 一组预先筛选的常用根证书。其中仅包含约 42 份证书，但根据 SSL 证书颁发机构统计数据，其绝对使用率约达到 93%，市场覆盖率约达 99%。
* 一组预先筛选的常用根证书。其中仅包含约 38 份证书，但根据 SSL 证书颁发机构统计数据，其绝对使用率约达到 93%，市场覆盖率约达 99%。
此外，还可指定证书文件的路径或包含证书的目录，将其他证书添加到生成的证书包中。