Skip to content

Remove bundled root certificates#1784

Open
bdewater-thatch wants to merge 1 commit intostripe:masterfrom
bdewater-thatch:remove-bundled-certificates
Open

Remove bundled root certificates#1784
bdewater-thatch wants to merge 1 commit intostripe:masterfrom
bdewater-thatch:remove-bundled-certificates

Conversation

@bdewater-thatch
Copy link

Why?

Fixes #1783

What?

  • Removes lib/data/ca-certificates.crt and the Rake task to update it
  • Removes Stripe::DEFAULT_CA_BUNDLE_PATH constant
  • Changes @ca_bundle_path default value

@bdewater-thatch bdewater-thatch requested a review from a team as a code owner February 11, 2026 19:26
@bdewater-thatch bdewater-thatch requested review from mbroshi-stripe and removed request for a team February 11, 2026 19:26
@cla-assistant
Copy link

cla-assistant bot commented Feb 11, 2026

CLA assistant check
All committers have signed the CLA.

@bdewater-thatch bdewater-thatch force-pushed the remove-bundled-certificates branch from c9efbe5 to 3fc3451 Compare February 12, 2026 13:37
@mbroshi-stripe
Copy link
Contributor

@bdewater-thatch Thanks for putting together this PR! We still need to evaluate the user impact of removing root certs from our shipped SDK before evaluating this PR. I will leave this open for now, but just to set expectations, we do not have any immediate plans on our roadmap to complete that work.

@mbroshi-stripe mbroshi-stripe removed their request for review February 18, 2026 14:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Stop bundling root certificates and use the system certs instead

2 participants