1504300 - CCADB entries generated 2018-11-02T11:49:33Z

Status: RESOLVED FIXED

(Core :: Security Block-lists, Allow-lists, and other State, defect)

Description

[Wayne Thayer]

Here are some entries: Please ensure that the entries are correct.

Comment 1

[Wayne Thayer]

Attachment: Intermediates to be revoked

Revocations data for new records

Comment 2

[Wayne Thayer]

Attachment: existing and new revocations in the form of a revocations.txt file

Revocations data for new and existing records

Comment 3

[J.C. Jones [:jcj] (he/him)]

Comment on attachment 9022241 [details]
Intermediates to be revoked

Downloading attachment ID 9022241 found, dated 2018-11-02 11:49:43 -0700
Intermediates to be revoked

Downloading intermediates to be revoked from bug # 1504300

Results:
Pending Kinto Dataset (Found): 823
Added Entries (Expected): 17
[GOOD] Expected But Not Pending (Not Found): 0
Deleted: 0
[GOOD] Entries In Production But Lost Without Being Deleted (Missing): 0

[GOOD] The Expected file matches the change between the staged Kinto and production.
[GOOD] The Kinto dataset found at production equals the union of the expected file and the live list.
Nothing not found.
Nothing deleted.


And I have checked each serial/issuer against the CCADB list.

Comment 4

[Kathleen Wilson]

Comment on attachment 9022241 [details]
Intermediates to be revoked

I confirm that these are the correct entries to add to OneCRL. Thanks!

Comment 5

[Kathleen Wilson]

Comment on attachment 9022243 [details]
existing and new revocations in the form of a revocations.txt file

I confirm that this version of revocations.txt contains the new entries.

Comment 6

[Kathleen Wilson]

I think it would be a good idea to run compat testing on this set of changes.

Comment 7

[J.C. Jones [:jcj] (he/him)]

CR, can you do a standard compat run with this set of OneCRL updates? Thanks!

Comment 8

[Christiane Ruetten [INACTIVE]]

Regression started at 2018-11-07 09:44 UTC, expecting results within the next 24h.

Comment 9

[Christiane Ruetten [INACTIVE]]

The regression run just finished and yielded no regressions at all. Was this the hoped-for result?

Comment 10

[J.C. Jones [:jcj] (he/him)]

That's a perfect result. The CAs in question said we shouldn't see any issues, but trust... verify... etc. :) Thank you, CR!

All approvals in place. I'll trigger at Kinto.

Comment 11

[J.C. Jones [:jcj] (he/him)]

Re-run of the blacklist checker shows identical to Comment 5.

Approved at Kinto. Deployed.

Comment 12

[Kathleen Wilson]

I confirm that these have been added to OneCRL. Thanks!

Comment 13

[BMO Automation]

Moving bug to Core::Security Block-lists, Allow-lists, and other State.