1329981 - CCADB entries generated 2017-01-10

Status: RESOLVED FIXED

(Core :: Security Block-lists, Allow-lists, and other State, defect)

Description

[Mark Goodwin [:mgoodwin]]

Attachment: Blocklist entries for addition to the AMO cert blocklist

These entries are the final set of backlog entries.

Please add these once Kathleen and Matt have been able to review

Comment 1

[Mark Goodwin [:mgoodwin]]

Attachment: sample revocations.txt for compat testing

Comment 2

[Jorge Villalobos [:jorgev] (he/him)]

Another big list. Jason, can you take this one?

Comment 3

[Jason Thomas [:jason]]

Do we need to wait for compat testing before adding this to production?

Wei can you handle this? I used this script last time - https://gist.github.com/jasonthomas/efce4ccf549cf640f82e914d7a54ee8f - I would run it on stage and see if the changes are reflected at https://blocklist.allizom.org/blocklist/3/x/x/x/

Comment 4

[Kathleen Wilson]

Comment on attachment 8825400 [details]
Blocklist entries for addition to the AMO cert blocklist

I confirm that these are the correct blocklist entries that need to be added to OneCRL.  Thanks!

Comment 5

[Kathleen Wilson]

(In reply to Jason Thomas [:jason] from comment #3)
> Do we need to wait for compat testing before adding this to production?

Yes.

Matt, please perform compat testing for the addition of these blocklist entries.

Comment 6

[:wezhou]

Hi Matt,

Can you let me know when the compat testing is done? I'll then add the list of certs to amo block list.

Thanks.

Comment 7

[Matt Wobensmith [:mwobensmith][:matt:]]

No breakage found.

Comment 8

[:wezhou]

I've run the script above and added the listed certs into the database.

Comment 9

[Kathleen Wilson]

Thanks!

Comment 10

[BMO Automation]

Moving bug to Core::Security Block-lists, Allow-lists, and other State.