Closed Bug 1303383 Opened 3 years ago Closed 3 years ago

Enable Amazon root certificates for EV in PSM

Categories

(Core :: Security: PSM, enhancement, P1)

enhancement

Tracking

()

RESOLVED FIXED
mozilla54
Tracking Status
firefox54 --- fixed

People

(Reporter: kwilson, Assigned: keeler)

References

Details

(Whiteboard: Included in Firefox 51[psm-assigned])

Attachments

(1 file)

Per bug #1172401 the request from Amazon has been approved to enable the following root certificates for EV use. Please make the corresponding changes to PSM. 
	 
Friendly Name: Amazon Root CA 1
SHA-1 Fingerprint: 8D:A7:F9:65:EC:5E:FC:37:91:0F:1C:6E:59:FD:C1:CC:6A:6E:DE:16
SHA-256 Fingerprint: 8E:CD:E6:88:4F:3D:87:B1:12:5B:A3:1A:C3:FC:B1:3D:70:16:DE:7F:57:CC:90:4F:E1:CB:97:C6:AE:98:19:6E
EV Policy OID: 2.23.140.1.1
Test URL: https://good.sca1a.amazontrust.com/

Friendly Name: Amazon Root CA 2
SHA-1 Fingerprint: 5A:8C:EF:45:D7:A6:98:59:76:7A:8C:8B:44:96:B5:78:CF:47:4B:1A
SHA-256 Fingerprint: 1B:A5:B2:AA:8C:65:40:1A:82:96:01:18:F8:0B:EC:4F:62:30:4D:83:CE:C4:71:3A:19:C3:9C:01:1E:A4:6D:B4
EV Policy OID: 2.23.140.1.1
Test URL: https://good.sca2a.amazontrust.com/
 
Friendly Name: Amazon Root CA 3
SHA-1 Fingerprint: 0D:44:DD:8C:3C:8C:1A:1A:58:75:64:81:E9:0F:2E:2A:FF:B3:D2:6E
SHA-256 Fingerprint: 18:CE:6C:FE:7B:F1:4E:60:B2:E3:47:B8:DF:E8:68:CB:31:D0:2E:BB:3A:DA:27:15:69:F5:03:43:B4:6D:B3:A4
EV Policy OID: 2.23.140.1.1
Test URL: https://good.sca3a.amazontrust.com/
 
Friendly Name: Amazon Root CA 4
SHA-1 Fingerprint: F6:10:84:07:D6:F8:BB:67:98:0C:C2:E2:44:C2:EB:AE:1C:EF:63:BE
SHA-256 Fingerprint: E3:5D:28:41:9E:D0:20:25:CF:A6:90:38:CD:62:39:62:45:8D:A5:C6:95:FB:DE:A3:C2:2B:0B:FB:25:89:70:92
EV Policy OID: 2.23.140.1.1
Test URL: https://good.sca4a.amazontrust.com/

Friendly Name: Starfield Services Root Certificate Authority - G2
SHA-1 Fingerprint: 92:5A:8F:8D:2C:6D:04:E0:66:5F:59:6A:FF:22:D8:63:E8:25:6F:3F
SHA-256 Fingerprint: 56:8D:69:05:A2:C8:87:08:A4:B3:02:51:90:ED:CF:ED:B1:97:4A:60:6A:13:C6:E5:29:0F:CB:2A:E6:3E:DA:B5
EV Policy OID: 2.23.140.1.1
Test URL: https://good.sca0a.amazontrust.com/
Whiteboard: Waiting for Inclusion via Bug 1303377
Peter, Please confirm that the information in this bug is correct.
The information is correct.
Priority: -- → P3
Whiteboard: Waiting for Inclusion via Bug 1303377 → Waiting for Inclusion via Bug 1303377[psm-blocked]
Whiteboard: Waiting for Inclusion via Bug 1303377[psm-blocked] → Included in Firefox 51, please proceed with EV-enablement
Assignee: nobody → dkeeler
Priority: P3 → P1
Whiteboard: Included in Firefox 51, please proceed with EV-enablement → Included in Firefox 51[psm-assigned]
(Note that this patch conflicts with the patch in bug 1307984 - after review I'll probably just land one, rebase, and then land the other.)
Comment on attachment 8832281 [details]
bug 1303383 - enable 5 Amazon root CAs for EV

https://reviewboard.mozilla.org/r/108612/#review109774

Verified with `pp`. LGTM.
Attachment #8832281 - Flags: review?(jjones) → review+
Pushed by dkeeler@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/abf765aee76c
enable 5 Amazon root CAs for EV r=jcj
https://hg.mozilla.org/mozilla-central/rev/abf765aee76c
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla54
You need to log in before you can comment on or make changes to this bug.