From cdff63e838c4468af27a3a553720aed1f029db41 Mon Sep 17 00:00:00 2001 From: Espressif BOT Date: Sun, 7 Jun 2026 11:04:38 +0800 Subject: [PATCH] change(mbedtls/crt_bundle): Update esp_cmn_crt_bundle certificates --- components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv | 7 +------ docs/en/api-reference/protocols/esp_crt_bundle.rst | 2 +- docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst | 2 +- 3 files changed, 3 insertions(+), 8 deletions(-) diff --git a/components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv b/components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv index 0e50c650175..396784c9c39 100644 --- a/components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv +++ b/components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv @@ -4,18 +4,15 @@ Amazon Trust Services,Amazon Root CA 2 Amazon Trust Services,Amazon Root CA 3 Amazon Trust Services,Amazon Root CA 4 Amazon Trust Services,Starfield Services Root Certificate Authority - G2 -DigiCert,DigiCert Assured ID Root CA DigiCert,DigiCert Assured ID Root G2 DigiCert,DigiCert Assured ID Root G3 -DigiCert,DigiCert Global Root CA DigiCert,DigiCert Global Root G2 DigiCert,DigiCert Global Root G3 -DigiCert,DigiCert High Assurance EV Root CA DigiCert,DigiCert TLS ECC P384 Root G5 DigiCert,DigiCert TLS RSA4096 Root G5 DigiCert,DigiCert Trusted Root G4 -GlobalSign nv-sa,GlobalSign ECC Root CA - R5 GlobalSign nv-sa,GlobalSign Root CA - R6 +GlobalSign nv-sa,GlobalSign ECC Root CA - R5 GlobalSign nv-sa,GlobalSign Root CA - R3 GlobalSign nv-sa,GlobalSign Root E46 GlobalSign nv-sa,GlobalSign Root R46 @@ -24,7 +21,6 @@ GoDaddy,Starfield Class 2 CA GoDaddy,Starfield Root Certificate Authority - G2 Google Trust Services LLC,GlobalSign ECC Root CA - R4 Google Trust Services LLC,GTS Root R1 -Google Trust Services LLC,GTS Root R2 Google Trust Services LLC,GTS Root R3 Google Trust Services LLC,GTS Root R4 "IdenTrust Services, LLC",IdenTrust Commercial Root CA 1 @@ -32,7 +28,6 @@ Google Trust Services LLC,GTS Root R4 Internet Security Research Group,ISRG Root X1 Internet Security Research Group,ISRG Root X2 Sectigo,Comodo AAA Services root -Sectigo,COMODO Certification Authority Sectigo,COMODO ECC Certification Authority Sectigo,COMODO RSA Certification Authority Sectigo,Sectigo Public Server Authentication Root E46 diff --git a/docs/en/api-reference/protocols/esp_crt_bundle.rst b/docs/en/api-reference/protocols/esp_crt_bundle.rst index 6ad286da801..5851d5e8f88 100644 --- a/docs/en/api-reference/protocols/esp_crt_bundle.rst +++ b/docs/en/api-reference/protocols/esp_crt_bundle.rst @@ -13,7 +13,7 @@ The bundle comes with the complete list of root certificates from Mozilla's NSS When generating the bundle you may choose between: * The full root certificate bundle from Mozilla, containing more than 130 certificates. The current bundle was updated Thu May 14 03:12:02 2026 GMT. - * A pre-selected filter list of the name of the most commonly used root certificates, reducing the amount of certificates to around 38 while still having around 93% absolute usage coverage and 99% market share coverage according to SSL certificate authorities statistics. + * A pre-selected filter list of the name of the most commonly used root certificates, reducing the amount of certificates to around 35 while still having around 94% absolute usage coverage and 99% market share coverage according to SSL certificate authorities statistics. In addition, it is possible to specify a path to a certificate file or a directory containing certificates which then will be added to the generated bundle. diff --git a/docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst b/docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst index 8b82b1de688..6c43c9ee4a5 100644 --- a/docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst +++ b/docs/zh_CN/api-reference/protocols/esp_crt_bundle.rst @@ -13,7 +13,7 @@ ESP x509 证书包 API 提供了一种简便的方法，帮助你安装自定义 生成证书包时，你需选择： * 来自 Mozilla 的完整根证书包，包含超过 130 份证书。目前提供的证书包更新于 2026 年 5 月 14 日，星期四, 03:12:02 (GMT)。 -* 一组预先筛选的常用根证书。其中仅包含约 38 份证书，但根据 SSL 证书颁发机构统计数据，其绝对使用率约达到 93%，市场覆盖率约达 99%。 +* 一组预先筛选的常用根证书。其中仅包含约 35 份证书，但根据 SSL 证书颁发机构统计数据，其绝对使用率约达到 94%，市场覆盖率约达 99%。 此外，还可指定证书文件的路径或包含证书的目录，将其他证书添加到生成的证书包中。