Closed Bug 1145270 Opened 9 years ago Closed 9 years ago

Remove E-Guven root certificate from NSS

Categories

(NSS :: CA Certificates Code, task)

task
Not set
normal

Tracking

(Not tracked)

VERIFIED FIXED
3.18.1

People

(Reporter: kathleen.a.wilson, Assigned: KaiE)

Details

Attachments

(1 file, 1 obsolete file)

As per https://bugzilla.mozilla.org/show_bug.cgi?id=476428#c41 I have concerns about the audit statements for the E-Guven CA. In mozilla.dev.security.policy I proposed removing the E-Guven root certificate due to my concerns about their audits, and there was general consensus.

Therefore, please remove the following root certificate from NSS.

Issuer Field:
CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
O = Elektronik Bilgi Guvenligi A.S.
C = TR

SHA-1 Fingerprint: DD:E1:D2:A9:01:80:2E:1D:87:5E:84:B3:80:7E:4B:B1:FD:99:41:34
Target Milestone: --- → 3.18.1
Attached patch patch v1 (obsolete) — Splinter Review
Assignee: nobody → kaie
Attachment #8580210 - Flags: review?(kwilson)
Attached patch patch v2Splinter Review
This patch also updates the version number.
Attachment #8580210 - Attachment is obsolete: true
Attachment #8580210 - Flags: review?(kwilson)
Attachment #8580212 - Flags: review?(kwilson)
Comment on attachment 8580212 [details] [diff] [review]
patch v2

r+ rrelyea
Attachment #8580212 - Flags: review?(ryan.sleevi)
Attachment #8580212 - Flags: review?(kwilson)
Attachment #8580212 - Flags: review+
Note that the root will expire at the beginning of 2017 anyway.
Attachment #8580212 - Flags: review?(ryan.sleevi) → review+
https://hg.mozilla.org/projects/nss/rev/e2b98ed12caa
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Target Milestone: 3.18.1 → 3.19
Landed into NSS_3_18_BRANCH
https://hg.mozilla.org/projects/nss/rev/3a41adab01a0
Target Milestone: 3.19 → 3.18.1
Verified in Fx38.0b8. 

FYI, note that the following four sites will currently break due to this removal. 

https://portal.emu.edu.tr
https://pg.tejaratbank.net
https://ogr.rize.edu.tr
https://www.imzalagonder.com
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: