blackbeard420/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf synced 2025-03-09 09:09:10 -04:00
Code Issues Projects Releases Wiki Activity

Merge branch 'update/update_cmn_crt_authorities_csv' into 'master'

Browse Source 
Update common cert authorities csv

See merge request espressif/esp-idf!35141
This commit is contained in:
Mahavir Jain 2024-12-18 20:15:26 +08:00
commit 40d450dd58
3 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv
View File

@ -15,9 +15,9 @@ DigiCert,DigiCert High Assurance EV Root CA
DigiCert,DigiCert TLS ECC P384 Root G5
DigiCert,DigiCert TLS RSA4096 Root G5
DigiCert,DigiCert Trusted Root G4
GlobalSign nv-sa,GlobalSign Root CA - R3
GlobalSign nv-sa,GlobalSign ECC Root CA - R5
GlobalSign nv-sa,GlobalSign Root CA - R6
GlobalSign nv-sa,GlobalSign ECC Root CA - R5
GlobalSign nv-sa,GlobalSign Root CA - R3
GlobalSign nv-sa,GlobalSign Root CA
GlobalSign nv-sa,GlobalSign Root E46
GlobalSign nv-sa,GlobalSign Root R46
@ -30,7 +30,6 @@ Google Trust Services LLC,GTS Root R1
Google Trust Services LLC,GTS Root R2
Google Trust Services LLC,GTS Root R3
Google Trust Services LLC,GTS Root R4
"IdenTrust Services, LLC",DST Root CA X3
"IdenTrust Services, LLC",IdenTrust Commercial Root CA 1
"IdenTrust Services, LLC",IdenTrust Public Sector Root CA 1
Internet Security Research Group,ISRG Root X1
@ -38,5 +37,7 @@ Internet Security Research Group,ISRG Root X2
Sectigo,COMODO Certification Authority
Sectigo,COMODO ECC Certification Authority
Sectigo,COMODO RSA Certification Authority
Sectigo,Sectigo Public Server Authentication Root E46
Sectigo,Sectigo Public Server Authentication Root R46
Sectigo,USERTrust ECC Certification Authority
Sectigo,USERTrust RSA Certification Authority

1 Owner Common Name or Certificate Name
15 DigiCert DigiCert TLS ECC P384 Root G5
16 DigiCert DigiCert TLS RSA4096 Root G5
17 DigiCert DigiCert Trusted Root G4
GlobalSign nv-sa GlobalSign Root CA - R3
GlobalSign nv-sa GlobalSign ECC Root CA - R5
18 GlobalSign nv-sa GlobalSign Root CA - R6
19 GlobalSign nv-sa GlobalSign ECC Root CA - R5
20 GlobalSign nv-sa GlobalSign Root CA - R3
21 GlobalSign nv-sa GlobalSign Root CA
22 GlobalSign nv-sa GlobalSign Root E46
23 GlobalSign nv-sa GlobalSign Root R46
30 Google Trust Services LLC GTS Root R2
31 Google Trust Services LLC GTS Root R3
32 Google Trust Services LLC GTS Root R4
IdenTrust Services, LLC DST Root CA X3
33 IdenTrust Services, LLC IdenTrust Commercial Root CA 1
34 IdenTrust Services, LLC IdenTrust Public Sector Root CA 1
35 Internet Security Research Group ISRG Root X1
37 Sectigo COMODO Certification Authority
38 Sectigo COMODO ECC Certification Authority
39 Sectigo COMODO RSA Certification Authority
40 Sectigo Sectigo Public Server Authentication Root E46
41 Sectigo Sectigo Public Server Authentication Root R46
42 Sectigo USERTrust ECC Certification Authority
43 Sectigo USERTrust RSA Certification Authority

2
docs/en/api-reference/protocols/esp_crt_bundle.rst
View File

@ -17,7 +17,7 @@ The bundle comes with the complete list of root certificates from Mozilla's NSS
When generating the bundle you may choose between:
* The full root certificate bundle from Mozilla, containing more than 130 certificates. The current bundle was updated Tue Nov 26 13:58:25 2024 GMT.
* A pre-selected filter list of the name of the most commonly used root certificates, reducing the amount of certificates to around 41 while still having around 90% absolute usage coverage and 99% market share coverage according to SSL certificate authorities statistics.
* A pre-selected filter list of the name of the most commonly used root certificates, reducing the amount of certificates to around 42 while still having around 93% absolute usage coverage and 99% market share coverage according to SSL certificate authorities statistics.
In addition, it is possible to specify a path to a certificate file or a directory containing certificates which then will be added to the generated bundle.

2
docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst
View File

@ -17,7 +17,7 @@ ESP x509 证书包 API 提供了一种简便的方法，帮助你安装自定义
生成证书包时，你需选择：
* 来自 Mozilla 的完整根证书包，包含超过 130 份证书。目前提供的证书包更新于 2024 年 11 月 26 日，星期一, 13:58:25 (GMT)。
* 一组预先筛选的常用根证书。其中仅包含约 41 份证书，但根据 SSL 证书颁发机构统计数据，其绝对使用率约达到 90%，市场覆盖率约达 99%。
* 一组预先筛选的常用根证书。其中仅包含约 42 份证书，但根据 SSL 证书颁发机构统计数据，其绝对使用率约达到 93%，市场覆盖率约达 99%。
此外，还可指定证书文件的路径或包含证书的目录，将其他证书添加到生成的证书包中。