[wp-trac] [WordPress Trac] #54207: ca-bundle.crt contains expired certificate DST Root CA X3

[WordPress Trac]

#54207: ca-bundle.crt contains expired certificate DST Root CA X3
--------------------------+-----------------------------
 Reporter:  bradleyt      |       Owner:  SergeyBiryukov
     Type:  defect (bug)  |      Status:  reopened
 Priority:  normal        |   Milestone:  5.8.2
Component:  Security      |     Version:
 Severity:  normal        |  Resolution:
 Keywords:  fixed-major   |     Focuses:
--------------------------+-----------------------------

Comment (by jnylen0):

 Replying to [comment:11 chesio]:
 > my intention however was to only unset the certificate bundle set by
 WordPress

 From some quick testing, it looks like the closest you can do is to set a
 new bundle with a small number of certificates (1 certificate would
 probably work, but an empty file always generates an error for me).

 I would still opt for setting a custom certificate bundle with everything
 that WP includes, but only the DST Root certificate removed. The other
 certificates included by WP will help with compatibility for requests to
 other servers.

 The plugin I linked above should be able to fix the issue for you
 automatically, let me know if not.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/54207#comment:12>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform