Note: There are a few cases of duplicates in user autocompletion which are being worked on.

Enable Amazon root certificates for EV in PSM

RESOLVED FIXED in Firefox 54

Status

()

Core
Security: PSM
P1
enhancement
RESOLVED FIXED
10 months ago
6 months ago

People

(Reporter: Kathleen Wilson, Assigned: keeler)

Tracking

unspecified
mozilla54
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(firefox54 fixed)

Details

(Whiteboard: Included in Firefox 51[psm-assigned])

MozReview Requests

()

Submitter Diff Changes Open Issues Last Updated
Loading...
Error loading review requests:

Attachments

(1 attachment)

(Reporter)

Description

10 months ago
Per bug #1172401 the request from Amazon has been approved to enable the following root certificates for EV use. Please make the corresponding changes to PSM. 
	 
Friendly Name: Amazon Root CA 1
SHA-1 Fingerprint: 8D:A7:F9:65:EC:5E:FC:37:91:0F:1C:6E:59:FD:C1:CC:6A:6E:DE:16
SHA-256 Fingerprint: 8E:CD:E6:88:4F:3D:87:B1:12:5B:A3:1A:C3:FC:B1:3D:70:16:DE:7F:57:CC:90:4F:E1:CB:97:C6:AE:98:19:6E
EV Policy OID: 2.23.140.1.1
Test URL: https://good.sca1a.amazontrust.com/

Friendly Name: Amazon Root CA 2
SHA-1 Fingerprint: 5A:8C:EF:45:D7:A6:98:59:76:7A:8C:8B:44:96:B5:78:CF:47:4B:1A
SHA-256 Fingerprint: 1B:A5:B2:AA:8C:65:40:1A:82:96:01:18:F8:0B:EC:4F:62:30:4D:83:CE:C4:71:3A:19:C3:9C:01:1E:A4:6D:B4
EV Policy OID: 2.23.140.1.1
Test URL: https://good.sca2a.amazontrust.com/
 
Friendly Name: Amazon Root CA 3
SHA-1 Fingerprint: 0D:44:DD:8C:3C:8C:1A:1A:58:75:64:81:E9:0F:2E:2A:FF:B3:D2:6E
SHA-256 Fingerprint: 18:CE:6C:FE:7B:F1:4E:60:B2:E3:47:B8:DF:E8:68:CB:31:D0:2E:BB:3A:DA:27:15:69:F5:03:43:B4:6D:B3:A4
EV Policy OID: 2.23.140.1.1
Test URL: https://good.sca3a.amazontrust.com/
 
Friendly Name: Amazon Root CA 4
SHA-1 Fingerprint: F6:10:84:07:D6:F8:BB:67:98:0C:C2:E2:44:C2:EB:AE:1C:EF:63:BE
SHA-256 Fingerprint: E3:5D:28:41:9E:D0:20:25:CF:A6:90:38:CD:62:39:62:45:8D:A5:C6:95:FB:DE:A3:C2:2B:0B:FB:25:89:70:92
EV Policy OID: 2.23.140.1.1
Test URL: https://good.sca4a.amazontrust.com/

Friendly Name: Starfield Services Root Certificate Authority - G2
SHA-1 Fingerprint: 92:5A:8F:8D:2C:6D:04:E0:66:5F:59:6A:FF:22:D8:63:E8:25:6F:3F
SHA-256 Fingerprint: 56:8D:69:05:A2:C8:87:08:A4:B3:02:51:90:ED:CF:ED:B1:97:4A:60:6A:13:C6:E5:29:0F:CB:2A:E6:3E:DA:B5
EV Policy OID: 2.23.140.1.1
Test URL: https://good.sca0a.amazontrust.com/
(Reporter)

Updated

10 months ago
Whiteboard: Waiting for Inclusion via Bug 1303377
(Reporter)

Comment 1

10 months ago
Peter, Please confirm that the information in this bug is correct.

Comment 2

10 months ago
The information is correct.
(Assignee)

Updated

10 months ago
Priority: -- → P3
Whiteboard: Waiting for Inclusion via Bug 1303377 → Waiting for Inclusion via Bug 1303377[psm-blocked]
(Reporter)

Updated

6 months ago
Whiteboard: Waiting for Inclusion via Bug 1303377[psm-blocked] → Included in Firefox 51, please proceed with EV-enablement
(Assignee)

Updated

6 months ago
Assignee: nobody → dkeeler
Priority: P3 → P1
Whiteboard: Included in Firefox 51, please proceed with EV-enablement → Included in Firefox 51[psm-assigned]
Comment hidden (mozreview-request)
(Assignee)

Comment 4

6 months ago
(Note that this patch conflicts with the patch in bug 1307984 - after review I'll probably just land one, rebase, and then land the other.)

Comment 5

6 months ago
mozreview-review
Comment on attachment 8832281 [details]
bug 1303383 - enable 5 Amazon root CAs for EV

https://reviewboard.mozilla.org/r/108612/#review109774

Verified with `pp`. LGTM.
Attachment #8832281 - Flags: review?(jjones) → review+

Comment 6

6 months ago
Pushed by dkeeler@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/abf765aee76c
enable 5 Amazon root CAs for EV r=jcj
https://hg.mozilla.org/mozilla-central/rev/abf765aee76c
Status: NEW → RESOLVED
Last Resolved: 6 months ago
status-firefox54: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla54
You need to log in before you can comment on or make changes to this bug.