1407559 - CCADB entries generated 2017-10-11T10:26:59Z

Status: RESOLVED FIXED

(Core :: Security Block-lists, Allow-lists, and other State, enhancement)

Comment 1

[omphalos]

Attachment: Intermediates to be revoked

Revocations data for new records

Comment 2

[omphalos]

Attachment: existing and new revocations in the form of a revocations.txt file

Revocations data for new and existing records

Comment 3

[omphalos]

(2, 04000000000141a1e1393e, Belgium Root CA3) no match found in CRL: 

(5, 04000000000141a1e134ba, Belgium Root CA2) no match found in CRL: 

(6, 04000000000141a1e13d26, Belgium Root CA4) no match found in CRL: 

(10, 46a157c463ee035f, Deutsche Telekom AG Issuing CA i01) no match found in CRL: 

(11, 0115, Deutsche Telekom AG Issuing CA 01) no match found in CRL:

Comment 4

[Mark Goodwin [:mgoodwin]]

See also bug 1407558 (these are the items from the new style report)

Comment 5

[Kathleen Wilson]

Comment on attachment 8917289 [details]
Intermediates to be revoked

I confirm that these are the correct entries to add to OneCRL.

Comment 6

[Kathleen Wilson]

Comment on attachment 8917290 [details]
existing and new revocations in the form of a revocations.txt file

Clearing my review of this particular attachment, because I have no idea how to review it.

Comment 7

[J.C. Jones [:jcj] (he/they)]

→ cat expected-1407559 expected-1407558 > expected-all
→ python3 kinto-blacklist-entry-checker.py -e expected-all

Evaluating expected file = 'expected-all'

Results:
Pending Kinto Dataset (Found): 490
Added Entries (Expected): 10
[GOOD] Expected But Not Pending (Not Found): 0
Deleted: 0
[GOOD] Entries In Production But Lost Without Being Deleted (Missing): 0

[GOOD] The Expected file matches the change between the staged Kinto and production.
[GOOD] The Kinto dataset found at production equals the union of the expected file and the live list.
Nothing not found.
Nothing deleted.

Comment 8

[Matt Wobensmith [:mwobensmith][:matt:]]

Comment on attachment 8917290 [details]
existing and new revocations in the form of a revocations.txt file

Full canary run completed with no compatibility errors.

Comment 9

[J.C. Jones [:jcj] (he/they)]

OK, I will commit these to Kinto.

Comment 10

[J.C. Jones [:jcj] (he/they)]

Committed to Kinto.

Comment 11

[Kathleen Wilson]

I confirm that these have been added to OneCRL. Thanks!

Comment 12

[BMO Automation]

Moving bug to Core::Security Block-lists, Allow-lists, and other State.