Merge branch 'update/update_cmn_crt_authorities_csv' into 'master'

Update common cert authorities csv See merge request espressif/esp-idf!35141
EliteTK · Dec 18, 2024 · 40d450d · 40d450d
2 parents 82c26fd + 24be50e
commit 40d450d
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 5 deletions.
diff --git a/components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv b/components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv
@@ -15,9 +15,9 @@ DigiCert,DigiCert High Assurance EV Root CA
 DigiCert,DigiCert TLS ECC P384 Root G5
 DigiCert,DigiCert TLS RSA4096 Root G5
 DigiCert,DigiCert Trusted Root G4
-GlobalSign nv-sa,GlobalSign Root CA - R3
-GlobalSign nv-sa,GlobalSign ECC Root CA - R5
 GlobalSign nv-sa,GlobalSign Root CA - R6
+GlobalSign nv-sa,GlobalSign ECC Root CA - R5
+GlobalSign nv-sa,GlobalSign Root CA - R3
 GlobalSign nv-sa,GlobalSign Root CA
 GlobalSign nv-sa,GlobalSign Root E46
 GlobalSign nv-sa,GlobalSign Root R46
@@ -30,13 +30,14 @@ Google Trust Services LLC,GTS Root R1
 Google Trust Services LLC,GTS Root R2
 Google Trust Services LLC,GTS Root R3
 Google Trust Services LLC,GTS Root R4
-"IdenTrust Services, LLC",DST Root CA X3
 "IdenTrust Services, LLC",IdenTrust Commercial Root CA 1
 "IdenTrust Services, LLC",IdenTrust Public Sector Root CA 1
 Internet Security Research Group,ISRG Root X1
 Internet Security Research Group,ISRG Root X2
 Sectigo,COMODO Certification Authority
 Sectigo,COMODO ECC Certification Authority
 Sectigo,COMODO RSA Certification Authority
+Sectigo,Sectigo Public Server Authentication Root E46
+Sectigo,Sectigo Public Server Authentication Root R46
 Sectigo,USERTrust ECC Certification Authority
 Sectigo,USERTrust RSA Certification Authority
diff --git a/docs/en/api-reference/protocols/esp_crt_bundle.rst b/docs/en/api-reference/protocols/esp_crt_bundle.rst
@@ -17,7 +17,7 @@ The bundle comes with the complete list of root certificates from Mozilla's NSS
 When generating the bundle you may choose between:
 
  * The full root certificate bundle from Mozilla, containing more than 130 certificates. The current bundle was updated Tue Nov 26 13:58:25 2024 GMT.
- * A pre-selected filter list of the name of the most commonly used root certificates, reducing the amount of certificates to around 41 while still having around 90% absolute usage coverage and 99% market share coverage according to SSL certificate authorities statistics.
+ * A pre-selected filter list of the name of the most commonly used root certificates, reducing the amount of certificates to around 42 while still having around 93% absolute usage coverage and 99% market share coverage according to SSL certificate authorities statistics.
 
 In addition, it is possible to specify a path to a certificate file or a directory containing certificates which then will be added to the generated bundle.
 

diff --git a/docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst b/docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst
@@ -17,7 +17,7 @@ ESP x509 证书包 API 提供了一种简便的方法，帮助你安装自定义
 生成证书包时，你需选择：
 
 * 来自 Mozilla 的完整根证书包，包含超过 130 份证书。目前提供的证书包更新于 2024 年 11 月 26 日，星期一, 13:58:25 (GMT)。
-* 一组预先筛选的常用根证书。其中仅包含约 41 份证书，但根据 SSL 证书颁发机构统计数据，其绝对使用率约达到 90%，市场覆盖率约达 99%。
+* 一组预先筛选的常用根证书。其中仅包含约 42 份证书，但根据 SSL 证书颁发机构统计数据，其绝对使用率约达到 93%，市场覆盖率约达 99%。
 
 此外，还可指定证书文件的路径或包含证书的目录，将其他证书添加到生成的证书包中。