343662 - Add Firmaprofesional root CA certificate to NSS

Status: RESOLVED FIXED

(NSS :: Libraries, enhancement, P2)

Description

[Frank Hecker]

As noted in bug 342426 I've approved inclusion of the root CA certificate for Firmaprofesional.

The SHA-1 fingerprint for this certificate is as follows:

a9 62 8f 4b 98 a9 1b 48 35 ba d2 c1 46 32 86 bb 66 64 6a 8c

(I'll attach the cert itself next; I guess bugzilla doesn't let you do this on initial bug entry.)

Comment 1

[Frank Hecker]

Attachment: Firmaprofesional root CA certificate

Adding the root CA certificate...

Comment 2

[Wan-Teh Chang]

Kai, please add this root CA certificate to the NSS
trunk and the NSS_3_11_BRANCH.  I can walk you through
the process offline.

Comment 3

[Kai Engert [:KaiE:]]

I am about to add this root CA cert shortly.

Open questions:

- What nickname should be used? 
  The common name is
    Autoridad de Certificacion Firmaprofesional CIF A62634068

  Should we use that as is?

- What usages are approved?
  Based on "bug 342426 comment 1", 
  it is not clear to me whether we should approve code signing.

- Frank, could you please send a signed email message with the root CA cert
  / the fingerprint of the cert you are approving?

Thanks

Comment 4

[Kai Engert [:KaiE:]]

Decided it will be approved for SSL and S/MIME certs but not code signing

Comment 5

[Kai Engert [:KaiE:]]

Done, checked in to NSS trunk and stable NSS 3.11 branch.