139874 - Inject Latest Roots CA Cert.

Status: VERIFIED FIXED

(Core Graveyard :: Security: UI, defect, P2)

Description

[Stephane Saux]

As discussed in ADT meeting, the PSM team will have roots to inject in the product.

A very important one will only be available on 5/30. The code change is minimal
(data change in a c file. no logic involved.)

Comment 1

[Jaime Rodriguez, Jr.]

nsbeta1+/[adt2 RTM], as 05/30 is past the MachV beta date.

Comment 2

[bill]

roots provided by shadow to ssaux 5/29/02 4:30pm PDT :)

Comment 3

[Stephane Saux]

cc Julien.

Comment 4

[Julien Pierre]

Updated the root certs on NSS_3_5_BRANCH and the NSS tip (NSS 3.6).

Comment 5

[Julien Pierre]

One more update for NSS 3.5 :

Checking in certdata.c;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/certdata.c,v  <--  certdata.c
new revision: 1.14.26.2; previous revision: 1.14.26.1
done
Checking in certdata.txt;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/certdata.txt,v  <--  certdata.txt
new revision: 1.16.26.2; previous revision: 1.16.26.1
done

And for NSS 3.6 : 

Checking in certdata.c;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/certdata.c,v  <--  certdata.c
new revision: 1.16; previous revision: 1.15
done
Checking in certdata.txt;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/certdata.txt,v  <--  certdata.txt
new revision: 1.18; previous revision: 1.17
done

I also moved the NSS_CLIENT_TAG to point to the new updates, so mozilla trunk
builds will have these new root certs.

Comment 6

[John Unruh]

Marking fixed on trunk. The AOL Time Warner CA now appears in a new profile.

Comment 7

[bill]

The America Online CA was submitted but is missing.

Comment 8

[Julien Pierre]

I am not sure how I missed them, but they weren't in. I have corrected that now
for both the 3.5 branch and 3.6 (tip). I have also just moved the NSS_CLIENT_TAG
to reflect these new root certs.

Comment 9

[John Unruh]

Verified on 6/14 trunk. Please check into branch.

Comment 10

[scottputterman]

nominating for rtm.

Comment 11

[Jaime Rodriguez, Jr.]

i'm pretty sure scott meant adt1.0.1, so i ma changing the keyword to adt1.0.1.
pls correct it, if i was mistaken.

Comment 12

[Jaime Rodriguez, Jr.]

adt1.0.1+ (on ADT's behalf) for checkin to the 1.0 branch. pls check this in
asap, then add the "fixed1.0.1" keyword.

Comment 13

[scottputterman]

Before checking in, please get drivers approval.

Comment 14

[Judson Valeski]

please checkin to the 1.0.1 branch. once there remove the mozilla1.0.1+ keyword
and add the fixed1.0.1 keyword.

Comment 15

[Julien Pierre]

Checked in to MOZILLA_1_0_BRANCH

Checking in certdata.c;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/certdata.c,v  <--  certdata.c
new revision: 1.14.12.3; previous revision: 1.14.12.2
done
Checking in certdata.txt;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/certdata.txt,v  <--  certdata.txt
new revision: 1.16.12.3; previous revision: 1.16.12.2
done

Comment 16

[John Unruh]

Verified on 6/18 branch OSX and Linux

Comment 17

[Julien Pierre]

There is a new root from VISA that needs to go into the NSS builtins as well. I
have already checked it into the trunk. It needs approval for the 1.0 branch.
Reopening.

Comment 18

[Jaime Rodriguez, Jr.]

removing "+" to nominate for approval for inclusion in the 1.0 branch.

Comment 19

[Stephane Saux]

Verified that the new root is in today's trunk build

Comment 20

[scottputterman]

removing verified1.0.1 since we're using this bug for the new cert.

Comment 21

[Jaime Rodriguez, Jr.]

adt1.0.1+ (on ADT's behalf) approval for checkin to the 1.0 branch. pls check
this in asap, then add the "fixed1.0.1" keyword.

Comment 22

[Judson Valeski]

please checkin to the 1.0.1 branch. once there, remove the "mozilla1.0.1+"
keyword and add the "fixed1.0.1" keyword.

Comment 23

[Julien Pierre]

Checked in to MOZILLA_1_0_BRANCH :

Checking in certdata.c;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/certdata.c,v  <--  certdata.c
new revision: 1.14.12.4; previous revision: 1.14.12.3
done
Checking in certdata.txt;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/certdata.txt,v  <--  certdata.txt
new revision: 1.16.12.4; previous revision: 1.16.12.3
done
Checking in constants.c;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/constants.c,v  <--  constants.c
new revision: 1.4.20.3; previous revision: 1.4.20.2
done

Comment 24

[Charles Rosendahl]

Verified on the 0702 branch builds.  AOL/AOL-TW/Visa CAs are all present.