1236964 - Enable Certum Trusted Network CA 2 certificate for EV in PSM

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement)

Description

[Kathleen Wilson]

Per bug 999378 the request from Unizeto Certum has been approved to enable the following root certificate for EV use. Please make the corresponding changes to PSM. 
	 
Friendly Name: Certum Trusted Network CA 2
SHA-1 Fingerprint: D3:DD:48:3E:2B:BF:4C:05:E8:AF:10:F5:FA:76:26:CF:D3:DC:30:92
EV Policy OID: 1.2.616.1.113527.2.5.1.1
Test URL: https://valid-certum-ctncav2.certificates.certum.pl/

Comment 1

[Dana Keeler (she/her) (use needinfo) (:keeler for reviews)]

Attachment: MozReview Request: bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r?jcj

Review commit: https://reviewboard.mozilla.org/r/40275/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/40275/

Comment 2

[J.C. Jones [:jcj] (he/him) [taking a break]]

Comment on attachment 8730961 [details]
MozReview Request: bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r?jcj

https://reviewboard.mozilla.org/r/40275/#review36849

After finally getting `pp` to compile, I've verified that I get the same values for the root.

![verification image](http://i.imgur.com/WvdpBen.png)

Comment 3

[Kathleen Wilson]

I tested with the try build on MacOS with a new profile, and the test site gets EV treatment.
The diff of the patch looks correct too.

Thanks!

Comment 4

[Pulsebot]

https://hg.mozilla.org/integration/mozilla-inbound/rev/480b307d65e6

Comment 5

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/480b307d65e6