From da1842ea0fdb6bb36b6f26f624c2c3488092e120 Mon Sep 17 00:00:00 2001 From: Espressif BOT Date: Sun, 1 Jun 2025 11:00:24 +0800 Subject: [PATCH] change(mbedtls/crt_bundle): Update esp_cmn_crt_bundle certificates --- components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv | 4 ---- docs/en/api-reference/protocols/esp_crt_bundle.rst | 2 +- docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst | 2 +- 3 files changed, 2 insertions(+), 6 deletions(-) diff --git a/components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv b/components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv index 27cd25e712..29cdfa5110 100644 --- a/components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv +++ b/components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv @@ -17,12 +17,9 @@ DigiCert,DigiCert Trusted Root G4 GlobalSign nv-sa,GlobalSign ECC Root CA - R5 GlobalSign nv-sa,GlobalSign Root CA - R6 GlobalSign nv-sa,GlobalSign Root CA - R3 -GlobalSign nv-sa,GlobalSign Root CA GlobalSign nv-sa,GlobalSign Root E46 GlobalSign nv-sa,GlobalSign Root R46 -GoDaddy,Go Daddy Class 2 CA GoDaddy,Go Daddy Root Certificate Authority - G2 -GoDaddy,Starfield Class 2 CA GoDaddy,Starfield Root Certificate Authority - G2 Google Trust Services LLC,GlobalSign ECC Root CA - R4 Google Trust Services LLC,GTS Root R1 @@ -33,7 +30,6 @@ Google Trust Services LLC,GTS Root R4 "IdenTrust Services, LLC",IdenTrust Public Sector Root CA 1 Internet Security Research Group,ISRG Root X1 Internet Security Research Group,ISRG Root X2 -Sectigo,Comodo AAA Services root Sectigo,COMODO Certification Authority Sectigo,COMODO ECC Certification Authority Sectigo,COMODO RSA Certification Authority diff --git a/docs/en/api-reference/protocols/esp_crt_bundle.rst b/docs/en/api-reference/protocols/esp_crt_bundle.rst index b843e3cfc5..9880ccd47d 100644 --- a/docs/en/api-reference/protocols/esp_crt_bundle.rst +++ b/docs/en/api-reference/protocols/esp_crt_bundle.rst @@ -17,7 +17,7 @@ The bundle comes with the complete list of root certificates from Mozilla's NSS When generating the bundle you may choose between: * The full root certificate bundle from Mozilla, containing more than 130 certificates. The current bundle was updated Tue May 20 03:12:02 2025 GMT. - * A pre-selected filter list of the name of the most commonly used root certificates, reducing the amount of certificates to around 42 while still having around 93% absolute usage coverage and 99% market share coverage according to SSL certificate authorities statistics. + * A pre-selected filter list of the name of the most commonly used root certificates, reducing the amount of certificates to around 38 while still having around 93% absolute usage coverage and 99% market share coverage according to SSL certificate authorities statistics. In addition, it is possible to specify a path to a certificate file or a directory containing certificates which then will be added to the generated bundle. diff --git a/docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst b/docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst index 62f96166ab..ef9790e6c8 100644 --- a/docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst +++ b/docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst @@ -17,7 +17,7 @@ ESP x509 证书包 API 提供了一种简便的方法，帮助你安装自定义 生成证书包时，你需选择： * 来自 Mozilla 的完整根证书包，包含超过 130 份证书。目前提供的证书包更新于 2025 年 5 月 20 日，星期天, 03:12:02 (GMT)。 -* 一组预先筛选的常用根证书。其中仅包含约 42 份证书，但根据 SSL 证书颁发机构统计数据，其绝对使用率约达到 93%，市场覆盖率约达 99%。 +* 一组预先筛选的常用根证书。其中仅包含约 38 份证书，但根据 SSL 证书颁发机构统计数据，其绝对使用率约达到 93%，市场覆盖率约达 99%。 此外，还可指定证书文件的路径或包含证书的目录，将其他证书添加到生成的证书包中。