Skip to content

Commit 6fe38c7

Browse files
Harshal5mahavirj
authored andcommitted
fix(mbedtls): re-include Comodo AAA Services root
1 parent 03433aa commit 6fe38c7

File tree

2 files changed

+30
-4
lines changed

2 files changed

+30
-4
lines changed

components/mbedtls/esp_crt_bundle/cacrt_local.pem

Lines changed: 29 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -3,10 +3,11 @@
33
##
44
## Local CA Root Certificates that gets appended to "cacrt_all.pem"
55
##
6-
## Starfield Class 2 CA has been removed from the list of trusted CAs
7-
## from Mozilla's CA Certificate Store. However, it is still used in
8-
## some endpoints and hence it is included here. This shall be removed
9-
## once the relevant endpoints are updated to use a different CA.
6+
## Starfield Class 2 and Comodo AAA Services root CA have been removed
7+
## from the list of trusted CAs from Mozilla's CA Certificate Store.
8+
## However, it is still used in some endpoints and hence it is included
9+
## here. This shall be removed once the relevant endpoints are updated
10+
## to use a different CA.
1011

1112
Starfield Class 2 CA
1213
====================
@@ -31,3 +32,27 @@ xy16paq8U4Zt3VekyvggQQto8PT7dL5WXXp59fkdheMtlb71cZBDzI0fmgAKhynpVSJYACPq4xJD
3132
KVtHCN2MQWplBqjlIapBtJUhlbl90TSrE9atvNziPTnNvT51cKEYWQPJIrSPnNVeKtelttQKbfi3
3233
QBFGmh95DmK/D5fs4C8fF5Q=
3334
-----END CERTIFICATE-----
35+
36+
Comodo AAA Services root
37+
========================
38+
-----BEGIN CERTIFICATE-----
39+
MIIEMjCCAxqgAwIBAgIBATANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJHQjEbMBkGA1UECAwS
40+
R3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0Eg
41+
TGltaXRlZDEhMB8GA1UEAwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTA0MDEwMTAwMDAw
42+
MFoXDTI4MTIzMTIzNTk1OVowezELMAkGA1UEBhMCR0IxGzAZBgNVBAgMEkdyZWF0ZXIgTWFuY2hl
43+
c3RlcjEQMA4GA1UEBwwHU2FsZm9yZDEaMBgGA1UECgwRQ29tb2RvIENBIExpbWl0ZWQxITAfBgNV
44+
BAMMGEFBQSBDZXJ0aWZpY2F0ZSBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
45+
ggEBAL5AnfRu4ep2hxxNRUSOvkbIgwadwSr+GB+O5AL686tdUIoWMQuaBtDFcCLNSS1UY8y2bmhG
46+
C1Pqy0wkwLxyTurxFa70VJoSCsN6sjNg4tqJVfMiWPPe3M/vg4aijJRPn2jymJBGhCfHdr/jzDUs
47+
i14HZGWCwEiwqJH5YZ92IFCokcdmtet4YgNW8IoaE+oxox6gmf049vYnMlhvB/VruPsUK6+3qszW
48+
Y19zjNoFmag4qMsXeDZRrOme9Hg6jc8P2ULimAyrL58OAd7vn5lJ8S3frHRNG5i1R8XlKdH5kBjH
49+
Ypy+g8cmez6KJcfA3Z3mNWgQIJ2P2N7Sw4ScDV7oL8kCAwEAAaOBwDCBvTAdBgNVHQ4EFgQUoBEK
50+
Iz6W8Qfs4q8p74Klf9AwpLQwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wewYDVR0f
51+
BHQwcjA4oDagNIYyaHR0cDovL2NybC5jb21vZG9jYS5jb20vQUFBQ2VydGlmaWNhdGVTZXJ2aWNl
52+
cy5jcmwwNqA0oDKGMGh0dHA6Ly9jcmwuY29tb2RvLm5ldC9BQUFDZXJ0aWZpY2F0ZVNlcnZpY2Vz
53+
LmNybDANBgkqhkiG9w0BAQUFAAOCAQEACFb8AvCb6P+k+tZ7xkSAzk/ExfYAWMymtrwUSWgEdujm
54+
7l3sAg9g1o1QGE8mTgHj5rCl7r+8dFRBv/38ErjHT1r0iWAFf2C3BUrz9vHCv8S5dIa2LX1rzNLz
55+
Rt0vxuBqw8M0Ayx9lt1awg6nCpnBBYurDC/zXDrPbDdVCYfeU0BsWO/8tqtlbgT2G9w84FoVxp7Z
56+
8VlIMCFlA2zs6SFz7JsDoeA3raAVGI/6ugLOpyypEBMs1OUIJqsil2D4kF501KKaU73yqWjgom7C
57+
12yxow+ev+to51byrvLjKzg6CYG1a4XXvi3tPxq3smPi9WIsgtRqAEFQ8TmDn5XpNpaYbg==
58+
-----END CERTIFICATE-----

components/mbedtls/esp_crt_bundle/cmn_crt_authorities.csv

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,7 @@ Google Trust Services LLC,GTS Root R4
3131
"IdenTrust Services, LLC",IdenTrust Public Sector Root CA 1
3232
Internet Security Research Group,ISRG Root X1
3333
Internet Security Research Group,ISRG Root X2
34+
Sectigo,Comodo AAA Services root
3435
Sectigo,COMODO Certification Authority
3536
Sectigo,COMODO ECC Certification Authority
3637
Sectigo,COMODO RSA Certification Authority

0 commit comments

Comments
 (0)