962536 - www.cert.fnmt.es certificates are not included in Mozilla products

Status: RESOLVED WONTFIX

(NSS :: CA Certificates Code, task)

Description

[Alberto Salvia Novella]

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0) Gecko/20100101 Firefox/26.0 (Beta/Release)
Build ID: 20131206145143

Steps to reproduce:

Sent a message signed with a certificate from the National Coin and Ding Factory of Spain (FNMT)


Actual results:

Since FNMT is not a certification authority carried in the default Thunderbird installation, sent certificate is seeing as invalid to all the recipients.


Expected results:

Certificate seeing as valid to all the recipients.

Comment 1

[Alberto Salvia Novella]

Certificates can be found at <http://preview.tinyurl.com/nwxgpko>.

Comment 2

[Alberto Salvia Novella]

Also affects Firefox: https://bugzilla.mozilla.org/show_bug.cgi?id=962527

Comment 3

[Alberto Salvia Novella]

Attachment: Certificates.tar.gz

Comment 4

[Camilo Viecco (:cviecco)]

Alberto, including a new trust anchor to our trust store is a process to ensue the security of all our users. If you are part of FMNT (Fabrica Nacional de Moneda y Timbre) please read http://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/ and after following the documented steps ask for inclusion into our root program.

Comment 5

[Alberto Salvia Novella]

I don't belong to FNMT, although I noticed them about this bug. They told me they're following the mentioned steps.

Thank you.