Closed Bug 1049220 Opened 11 years ago Closed 9 months ago

[meta] CA Program Automation

Categories

(mozilla.org Graveyard :: Project Review, task, P3)

Product:
mozilla.org Graveyard
Component:
Project Review
Type:
task

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: kathleen.a.wilson, Unassigned)

References

Details

Initial Questions: Project/Feature Name: CA Program Automation Tracking ID:1049203 Description: Customize salesforce.com for the needs of the CA program. Migrate the current CA program data from multiple spreadsheets into a single database. Goals of the first project: 1) Expose the CA program data more clearly. 2) Automate keeping the data (such as audit statements) current, 3) Enable others who use the CA bundle to contribute to managing the data. Future Goals (not part of this first project): + Manage the data for the 1500+ subordinate CA certificates + Manage the data for OneCRL Additional Information: == Current Situation == - Using Google Spreadsheets to manage root certificates (internal version with private information and notes about each CA, plus external version that gets published) -- http://www.mozilla.org/en-US/about/governance/policies/security-group/certs/included/ - Using Google Spreadsheet to maintain information/status about pending inclusion requests -- http://www.mozilla.org/en-US/about/governance/policies/security-group/certs/pending/ - Another Google Spreadsheet for subCA information, currently in the CA responses spreadsheet plus 2 tabs -- https://wiki.mozilla.org/CA:Communications#May_2014_Responses (column of URLs to info about Disclosed subCA certs, tab called SubCAs still in Transition, and tab called SubCAs in CRL/OCSP-Only Mode) - Yet another place (wiki page) to indicate which roots are getting included, and when they got included -- https://wiki.mozilla.org/NSS:Release_Versions - Also want to indicate what name constraints have been applied to each CA (e.g. https://bugzilla.mozilla.org/show_bug.cgi?id=952572) - I use a MS Word document with tables in it to collect/verify the information. It gets attached to the Bugzilla bug -- https://wiki.mozilla.org/File:CAInformationTemplate.pdf - The application/approval process has a complicated workflow, and I keep the high level status as part of the pending spreadsheet. -- https://wiki.mozilla.org/CA -- https://wiki.mozilla.org/File:CAInformationTemplate.pdf - Manually sending CA Communications and tabulating responses. Using separate Google Spreadsheets to keep track of CA Communication Responses -- https://wiki.mozilla.org/CA:Communications#May_2014_Responses -- https://wiki.mozilla.org/CA:Communications#July_2013_Responses - Manually looking through CA spreadsheet for outdated audit statements and sending emails to get current audit statements Key Initiative: Firefox Platform Release Date: 2014-11-05 Project Status: ready Mozilla Data: Yes Mozilla Related: Security -- Firefox, Thunderbird, etc. Separate Party: Yes Type of Relationship: Vendor/Services Data Access: Yes Privacy Policy: The data that they will have access to is not confidential. Vendor Cost: <= $25,000
Bug 1049221 - Security Review: CA Program Automation Bug 1049222 - Legal Review: Poonam Bhargava -- Independent Contractor - CA Program Automation Bug 1049223 - Finance Review: CA Program Automation Bug 1049224 - Privacy-Technical Review: CA Program Automation Bug 1049225 - Privacy-Policy Review: CA Program Automation Bug 1049226 - Privacy / Vendor Review: CA Program Automation
Blocks: 1049203
Please see Bug #1049203 for background on why this is needed.
Priority: -- → P3
Summary: CA Program Automation → [meta] CA Program Automation
This bug is no longer being worked on so it is being closed WONTFIX.
Status: NEW → RESOLVED
Closed: 9 months ago
Resolution: --- → WONTFIX
Product: mozilla.org → mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.