What is the wp-includes/certificates/ca-bundle.crt used for?

ca-bundle.crt File

It is an SSL Certificate file which WordPress uses as default for secure connections (https) when WordPress make request using HTTP API

This file is used in /wp-includes/class-http.php file. It is a WordPress default file (never remove anything from WP core!) so removing it will cause problem for the class to work properly.

Related Posts:

  1. what is a auth_user_file.txt?
  2. How to view PHP on live site
  3. Is moving wp-config outside the web root really beneficial?
  4. Hide the fact a site is using WordPress?
  5. Verifying that I have fully removed a WordPress hack?
  6. Can I Prevent Enumeration of Usernames?
  7. Best way to eliminate xmlrpc.php?
  8. If a hacker changed the blog_charset to UTF-7 does that make WordPress vulnerable to further attacks?
  9. Should I remove install.php and install-helper.php?
  10. Are Nonces Useless?
  11. What is the difference between esc_html filter vs attribute_escape filter?
  12. How do I technically prove that WordPress is secure?
  13. Which KSES should be used and when?
  14. How do WordPress Nonces Work?
  15. Tips for finding SPAM links injected into the_content
  16. Is WordPress vulnerable to the httpoxy?
  17. How can I easily verify a core or plugin update has not broken anything?
  18. Disable comment windows for all existing posts (pages/blogposts)
  19. Generate WordPress salt
  20. Vanilla WordPress install, what can/should I put in disable_functions?
  21. Stop wordpress automatically escaping $_POST data
  22. wp.getUsersBlogs XMLRPC Brute Force Attack/Vulnerability
  23. Secure my “add_settings_field” translation?
  24. Is there a security risk giving someone temporary access to my blog’s code?
  25. How to properly sanitize/secure a WP Query coming from the front end
  26. WordPress Logout Only If User Click Logout or If User Delete Browser History
  27. brute force attack even though it is limited by IP
  28. How brute-forcer knows that the password is cracked for target username?
  29. How do I authenticate WP users from a chrome extension?
  30. wp_insert_post disable HTML filter
  31. Can someone (Support of my themeprovider) get access to my server If I send them my admin login?
  32. Completely remove the author url
  33. Restricting access to content
  34. About WordPress site security
  35. Relative security of different releases of WordPress
  36. Is there any point setting the keys and salts in wp-config.php?
  37. Where to store OAuth 2.0 client id and secret?
  38. Registration Plugin – Recaptcha integration
  39. How can I safely use $_SERVER[‘REQUEST_URI’] to avoid XSS?
  40. Using HTACCESS for Secret Access
  41. Definitive wordpress directory ownership and permissions on linux
  42. Dangers to allowing Access-Control-Allow-Origin: * for Feeds only?
  43. Changing Table Prefixes – once done, am I good to go going forward?
  44. wordpress website host price and security [closed]
  45. Is there value in using a wp_nonce for POST requests?
  46. Are there security risks in working directly in the themes folder that builds into a theme folder?
  47. How to hide easy access to my website temporarily?
  48. Are un-sanitized theme options more vulnerable to malicious scripts than the theme editor?
  49. Secure WordPress: Change admin
  50. Changing the default header name
  51. how much information can we hide when using wordpress cms?
  52. Is it safe to use a global wp nonce per user instead of a nonce per action?
  53. Wordfence detects change in wp-admin/includes/upgrade.php
  54. Basic password protection without using users and roles
  55. System setting changed by system user
  56. Any any insecure http:// URLs left in wordpress?
  57. Does meta-data need to be sanitized?
  58. Will there be security updates for WordPress 4.9.9
  59. Any known bugs that could cause disappearance of the wp_users table?
  60. On new server, site got hacked, permissions a bit strange? Please help
  61. 404/500 error on content images if Referer header is from another domain [closed]
  62. Are SVG image files safe to upload? Why WP defines them as a security risk? [duplicate]
  63. Restrict Access without Creating Users
  64. Switching between security plugins is a risk?
  65. How to obfuscate wp-config.php or code
  66. Security issue with ‘paged’ and ‘posts_per_page’ parameters taken directly from a POST request?
  67. How to prevent to direct access of my custom plugin folder/files
  68. Checking for origin of a xmlrpc request
  69. RESTRICT EDIT of PHP files?
  70. wp-content – permissions for files/folders created by apache
  71. How can I restrict access to specific parts of a page, not just the page itself?
  72. User generated content and security
  73. Are major WordPress updates mandatory for security?
  74. i moved wp-config.php outside of public html and this broke my website
  75. Monitor wordpress all external calls
  76. Is it safe to use the basic administration with reduced rights for private member space
  77. Securing WordPress running on Azure platform
  78. Verifying that I have fully removed a WordPress hack?
  79. Spam Registrations
  80. How can I have more confidence that WP plugins aren’t getting and storing user data?
  81. Standard Method for Securing a WordPress Site
  82. wordpress security (only one part of the site)
  83. wp-config.php moved above root results in no plugin updates
  84. Avoid ‘uploads’ 777 permissions: Potential threat or clean solution?
  85. Any way to disable /wp-login.php redirecting to the site folder?
  86. Folder Permissions + Security Concerns
  87. Malware/Permission bug removal?
  88. Could a user account with a stolen password compromised entire WP site?
  89. Step by Step Instructions for Making Media/Uploads Private to Only Logged-In Users
  90. Secure a WordPress website in 2019: one plugin or a combinations of them?
  91. What are the different types of firewall protections available for a WordPress website?
  92. Run a security scan on WordPress site that has .htaccess password [closed]
  93. Is this a WordPress security bug?
  94. Competitor is somehow accessing MetaData on a hidden WordPress site
  95. WordPress Hacks/Defacing [closed]
  96. Move data from wp-config to another file
  97. How do you search for backdoors from the previous IT person?
  98. Heartbleed: What is it and what are options to mitigate it?
  99. OpenVPN vs. IPsec – Pros and cons, what to use?
  100. How to test if my server is vulnerable to the ShellShock bug?

Leave a Comment