834004 - Enable EV for GeoTrust ECC root

Status: RESOLVED WONTFIX

(CA Program :: CA Certificate Root Program, task)

Description

[Rick Andrews]

Attachment: CAInformationTemplate_GeoTrustExisting.docx

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0
Build ID: 20130116073211

Steps to reproduce:

I would like to update the trust bits for this root, already in Mozilla's trust list:
GeoTrust Primary Certification Authority - G2 (SHA384withECC)

Please set Websites (SSL/TLS), Code Signing and EV trust bits.

Comment 1

[Rick Andrews]

Attachment: Update of CAInformationTemplate document

Updated to contain information about external subordinate CA customers.

Comment 2

[Kathleen Wilson]

I apologize for the delay in my response. My work on root inclusion requests was postponed for a while.

I am accepting this bug, and will work on it as soon as possible, but I have a large backlog.
https://wiki.mozilla.org/CA:Schedule#Requests_in_the_Information_Gathering_and_Verification_Phase

I will update this bug when I begin the Information Verification phase.
https://wiki.mozilla.org/CA:How_to_apply#Information_Verification

Comment 3

[Kathleen Wilson]

All three trust bits are already enabled for this root.
http://tinyurl.com/MozillaBuiltInCAs

So I think this request is for EV enablement of an ECC root.
GeoTrust Primary Certification Authority - G2 (SHA384withECC)

Comment 4

[Kathleen Wilson]

Request is to EV-enable an already included root cert.

CA needs to complete EV testing before we can continue with this request.
https://wiki.mozilla.org/PSM:EV_Testing_Easy_Version

Comment 5

[Rick Andrews]

We don't see the green bar when we test. Here's the content of the test ev file:

1_fingerprint 8D:17:84:D5:37:F3:03:7D:EC:70:FE:57:8B:51:9A:99:E6:10:D7:B0
2_readable_oid 1.3.6.1.4.1.14370.1.6
3_issuer MIGYMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjE5MDcGA1UECxMwKGMpIDIwMDcgR2VvVHJ1c3QgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MTYwNAYDVQQDEy1HZW9UcnVzdCBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzI=
4_serial PLL0SAoA4v7rJDteYD7Daw==

Test site: https://ssltest42.ssl.symclab.com

Comment 6

[Dhara]

Attachment: Bug834004.PNG

Comment 7

[Dhara]

Attachment: test_ev_roots.txt

Comment 8

[Dhara]

Worked fine. Attached is the screenshot with EV and the test_ev_roots.txt file.

Comment 9

[suhasini_anand]

Hi Kathleen, could you please let us know if you are awaiting anything else from us? Thank you.

Comment 10

[Kathleen Wilson]

Attachment: 834004-CAInformation.pdf

In the attached document search for "NEED" to find the information that is still needed.

Please review the full document to make sure it is accurate and complete, and comment in this bug to provide corrections and the additional requested information.

Comment 11

[Kathleen Wilson]

Closing as WONTFIX, per https://wiki.mozilla.org/CA:Symantec_Issues etc.