1142137 - Add certItem blocklist entry to revoke T-Systems intermediate cert

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, defect)

Description

[Mark Goodwin [:mgoodwin]]

Attachment: blocklist item for addition

We need a blocklist entry adding for an intermediate certificate revocation.

The issuer name data is:
MGcxCzAJBgNVBAYTAkRFMRMwEQYDVQQKEwpGcmF1bmhvZmVyMSEwHwYDVQQLExhGcmF1bmhvZmVyIENvcnBvcmF0ZSBQS0kxIDAeBgNVBAMTF0ZyYXVuaG9mZXIgUm9vdCBDQSAyMDA3

and the certificate serial number is:
YR3YYQAAAAAABA==

(as per bug 1076940)

Some documentation can be found here: https://dxr.mozilla.org/mozilla-central/source/toolkit/mozapps/extensions/nsBlocklistService.js#731

Comment 1

[Mark Goodwin [:mgoodwin]]

There are going to be a number of these initially; does it make sense to file a single bug for all initial data or should we file individual bugs?

Comment 2

[Jorge Villalobos [:jorgev] (he/him)]

As far as I can tell, we have never done such a block, and AMO doesn't support cert blocks in its blocklist. Is there a different way to do this?

Comment 3

[Mark Goodwin [:mgoodwin]]

(In reply to Jorge Villalobos [:jorgev] from comment #2)
> As far as I can tell, we have never done such a block

True, this is the first such block.

> and AMO doesn't
> support cert blocks in its blocklist. Is there a different way to do this?

Changes were made as part of bug 1024809 to add support for revocation via the blocklist.xml - my understanding (from talking to the developers with knowledge of blocklist stuff) was that this is essentially a manual process.  Do we (I?) need to do more to allow for the addition of different elements? Who would be a good person to speak to about what's required?

Comment 4

[Mark Goodwin [:mgoodwin]]

Answering my own questions:
(In reply to Mark Goodwin [:mgoodwin] from comment #3)
> Do we (I?) need to do more to allow for the addition of different elements?

Yes, we need some changes to AMO.

> Who would be a good person to speak to about what's required?

Mathieu Agopian and Kris Maglione.

Comment 5

[Mark Goodwin [:mgoodwin]]

Can we add this item now, please?

Comment 6

[Jorge Villalobos [:jorgev] (he/him)]

Staged.

Comment 7

[Mark Goodwin [:mgoodwin]]

Looks good.

Comment 8

[Jorge Villalobos [:jorgev] (he/him)]

Pushed live.