261374 - Please add Staat der Nederlanden root CA cert

Status: VERIFIED FIXED

(NSS :: Libraries, enhancement, P2)

Description

[Frank Hecker]

I'm approving the Staat der Nederlanden (The Netherlands) root CA certificate
for inclusion in Mozilla, etc., per the discussion in bug 243424. Please add
this root certificate into the appropriate NSS release and mark it as trusted
for all purposes; see bug 243424 or
<http://www.hecker.org/mozilla/ca-certificate-list> for the URL of the
certificate itself.

(I'm marking this bug as blocking 243424.)

Comment 1

[Nelson Bolyard (seldom reads bugmail)]

Mass reassign to myself of enhancement requests for new root certs.
Targetting them all for NSS 3.10

Comment 2

[Nelson Bolyard (seldom reads bugmail)]

The patches that add these requested ROOT CA certs to the NSS 3.9 branch
and to the NSS trunk have been attached to bug 271585.  Please see 
bug 271585 for those attachments.  When those attachments have been 
reviewed and checked in, this bug will be marked resolved/fixed.

Comment 3

[Nelson Bolyard (seldom reads bugmail)]

These certs have been added to the trunk and the NSS 3.9 branch.
See bug 271585 for more details and the patches.

For testing purposes, for a short time (weeks), a copy of a debug build
of nssckbi.dll with these certs added, built from the NSS 3.9 branch,
may be obtained for testing at http://nelson.bolyard.com/mozilla/nssckbi.dll

I invite the representatives of the various CAs to download it and test it.
Please add any comments (reflecting success or failure) to this bug.
It passes my tests.

Comment 4

[Julien Pierre]

Mass re-assign of 3.9.5 fixed bugs to 3.9.6 , since we built 3.9.5 with the same
source tree as 3.9.4 .

Comment 5

[Wan-Teh Chang]

Verified with Firefox 1.0.2 that the Staat der Nederlanden
root CA is in the "Builtin Object Token" with the following
trust settings:
This certificate can identify web sites.
This certificate can identify mail users.
This certificate can identify software makers.