wp_trusted_keys() WordPress Function
The wp_trusted_keys() function is used to generate and display a list of trusted public keys. This function is used by the WordPress security team to manage and maintain a list of trusted keys that are used to verify the integrity of WordPress releases.
wp_trusted_keys() #
Retrieves the list of signing keys trusted by WordPress.
Return
(string[]) Array of base64-encoded signing keys.
Source
File: wp-admin/includes/file.php
function wp_trusted_keys() { $trusted_keys = array(); if ( time() < 1617235200 ) { // WordPress.org Key #1 - This key is only valid before April 1st, 2021. $trusted_keys[] = 'fRPyrxb/MvVLbdsYi+OOEv4xc+Eqpsj+kkAS6gNOkI0='; } // TODO: Add key #2 with longer expiration. /** * Filters the valid signing keys used to verify the contents of files. * * @since 5.2.0 * * @param string[] $trusted_keys The trusted keys that may sign packages. */ return apply_filters( 'wp_trusted_keys', $trusted_keys ); }
Expand full source codeCollapse full source codeView on TracView on GitHub
Changelog
Version | Description |
---|---|
5.2.0 | Introduced. |