1487485 - CCADB entries generated 2018-08-30T11:09:06Z

Status: RESOLVED FIXED

(Core :: Security Block-lists, Allow-lists, and other State, enhancement)

Description

[Wayne Thayer]

Here are some entries: Please ensure that the entries are correct.

Comment 1

[Wayne Thayer]

Attachment: Intermediates to be revoked

Revocations data for new records

Comment 2

[Wayne Thayer]

Attachment: existing and new revocations in the form of a revocations.txt file

Revocations data for new and existing records

Comment 3

[Wayne Thayer]

kinto-blacklist-entity-checker test passed:

Pending Kinto Dataset (Found): 806
Added Entries (Expected): 13
[GOOD] Expected But Not Pending (Not Found): 0
Deleted: 0
[GOOD] Entries In Production But Lost Without Being Deleted (Missing): 0

[GOOD] The Expected file matches the change between the staged Kinto and production.
[GOOD] The Kinto dataset found at production equals the union of the expected file and the live list.
Nothing not found.
Nothing deleted.

Comment 4

[J.C. Jones [:jcj] (he/they)]

Comment on attachment 9005280 [details]
Intermediates to be revoked

The duplicates in this file get deduplicated at Kinto, as is shown by the `kinto-blacklist-entry-checker` tool. I've opened a bug at https://github.com/mozilla/OneCRL-Tools/issues/128 .

Comment 5

[Kathleen Wilson]

Comment on attachment 9005280 [details]
Intermediates to be revoked

I confirm that these are the correct entries to add to OneCRL.

Comment 6

[Kathleen Wilson]

Comment on attachment 9005281 [details]
existing and new revocations in the form of a revocations.txt file

I confirm that the correct entries have been added to this version of revocations.txt.

Thanks!

Comment 7

[J.C. Jones [:jcj] (he/they)]

Comment on attachment 9005280 [details]
Intermediates to be revoked

Clearing unneeded reviews

Comment 8

[J.C. Jones [:jcj] (he/they)]

Comment on attachment 9005281 [details]
existing and new revocations in the form of a revocations.txt file

Clearing unneeded reviews

Comment 9

[Christiane Ruetten [INACTIVE]]

I'm seeing two regressions due to revocation.

        "host": "stage.crystalcruises.com",
        "rank": 696167,
            "host": "stage.crystalcruises.com",
            "rank": 696167,
            "short_error_message": "SEC_ERROR_REVOKED_CERTIFICATE",
        "host": "ocsp.ecce.gov.pt",
        "rank": 762292,
            "host": "ocsp.ecce.gov.pt",
            "rank": 762292,
            "short_error_message": "SEC_ERROR_REVOKED_CERTIFICATE",

LGTM.

Comment 10

[J.C. Jones [:jcj] (he/they)]

All r+'d, approving at Kinto.

Comment 11

[Kathleen Wilson]

I confirm that these have been added to OneCRL. Thanks!

Comment 12

[BMO Automation]

Moving bug to Core::Security Block-lists, Allow-lists, and other State.