Root certificate updating method and device

The embodiment of the invention discloses a root certificate updating method and device. The method comprises the following steps: sending a first handshake request to a server under the condition that a currently stored first root certificate is not expired; a first reply message of the server in response to the first handshake request is received, and the first reply message carries information of a second root certificate currently deployed by the server; after the handshake is successful and the connection is established according to the first reply message, judging whether the first root certificate is consistent with the second root certificate according to the information of the second root certificate; and under the condition that the first root certificate is inconsistent with the second root certificate, updating the currently stored first root certificate into the second root certificate. According to the method and the device, the technical problems that a root certificate updating method in the p