1487164 - CCADB entries generated 2018-08-29T10:46:10Z

Status: RESOLVED FIXED

(Core :: Security Block-lists, Allow-lists, and other State, defect)

Description

[Wayne Thayer]

Here are some entries: Please ensure that the entries are correct.

Comment 1

[Wayne Thayer]

Attachment: Intermediates to be revoked

Revocations data for new records

Comment 2

[Wayne Thayer]

Attachment: existing and new revocations in the form of a revocations.txt file

Revocations data for new and existing records

Comment 3

[J.C. Jones [:jcj] (he/they)]

Downloading intermediates to be revoked from bug # 1487164

Results:
Pending Kinto Dataset (Found): 793
Added Entries (Expected): 3
[GOOD] Expected But Not Pending (Not Found): 0
Deleted: 0
[GOOD] Entries In Production But Lost Without Being Deleted (Missing): 0

[GOOD] The Expected file matches the change between the staged Kinto and production.
[GOOD] The Kinto dataset found at production equals the union of the expected file and the live list.
Nothing not found.
Nothing deleted.

Comment 4

[Kathleen Wilson]

Comment on attachment 9004969 [details]
Intermediates to be revoked

I confirm that these are the correct entries to add to OneCRL according to Bug #1480853 and Bug #1484798.

We do not need compatibility testing for this change, so please review CR from the reviewers list.

Comment 5

[Kathleen Wilson]

Comment on attachment 9004970 [details]
existing and new revocations in the form of a revocations.txt file

Correct entries have been added. Again, please remove CR from reviewers list, because compat testing not needed for these changes.

Comment 6

[J.C. Jones [:jcj] (he/they)]

Comment on attachment 9004969 [details]
Intermediates to be revoked

Matches https://github.com/mozilla/OneCRL-Tools/pull/127

Comment 7

[J.C. Jones [:jcj] (he/they)]

r+s from all reviewers, tooling also gives an r+.

Comment 8

[J.C. Jones [:jcj] (he/they)]

Signed at Kinto and released unto the world.

Comment 9

[Kathleen Wilson]

I have verified that the changes showed up in revocations.txt on my system. Thanks!

Comment 10

[Christiane Ruetten [INACTIVE]]

Ran this through TLS Canary tonight, seeing one regression:

                "host": "stage.crystalcruises.com",
                "rank": 696167,
                            "host": "stage.crystalcruises.com",
                            "rank": 696167,
                            "short_error_message": "SEC_ERROR_REVOKED_CERTIFICATE",

Comment 11

[J.C. Jones [:jcj] (he/they)]

(In reply to Christiane Ruetten [:cr] from comment #10)
> Ran this through TLS Canary tonight, seeing one regression:
> 
>                 "host": "stage.crystalcruises.com",
>                 "rank": 696167,
>                             "host": "stage.crystalcruises.com",
>                             "rank": 696167,
>                             "short_error_message":
> "SEC_ERROR_REVOKED_CERTIFICATE",

Looks like their staging environment has an old cert; https://www.crystalcruises.com/ is fine.

Thanks, CR!

Comment 12

[BMO Automation]

Moving bug to Core::Security Block-lists, Allow-lists, and other State.