1521150 - CCADB entries generated 2019-01-18T11:45:13Z

Status: RESOLVED FIXED

(Core :: Security Block-lists, Allow-lists, and other State, task)

Description

[Wayne Thayer]

Here are some entries: Please ensure that the entries are correct.

Comment 1

[Wayne Thayer]

Attachment: Intermediates to be revoked

Revocations data for new records

Comment 2

[Wayne Thayer]

Attachment: existing and new revocations in the form of a revocations.txt file

Revocations data for new and existing records

Comment 3

[Wayne Thayer]

Intermediates to be revoked from bug 1521150

Evaluating expected file = 'expected.txt'

Results:
Pending Kinto Dataset (Found): 871
Added Entries (Expected): 22
[GOOD] Expected But Not Pending (Not Found): 0
Deleted: 0
[GOOD] Entries In Production But Lost Without Being Deleted (Missing): 0

[GOOD] The Expected file matches the change between the staged Kinto and production.
[GOOD] The Kinto dataset found at production equals the union of the expected file and the live list.
Nothing not found.
Nothing deleted.

Comment 4

[Wayne Thayer]

Kicked off TLSCanary compatibility run

Comment 5

[Kathleen Wilson]

Comment on attachment 9037621 [details]
Intermediates to be revoked

I confirm that these are the correct entries to add to OneCRL.

Comment 6

[Kathleen Wilson]

Comment on attachment 9037622 [details]
existing and new revocations in the form of a revocations.txt file

I confirm that the new entries are in this version of revocations.txt.

Comment 7

[Kathleen Wilson]

CR, It would be good to run compat testing on this set of updates to OneCRL. Thanks!

Comment 8

[Kathleen Wilson]

(In reply to Kathleen Wilson from comment #7)

CR, It would be good to run compat testing on this set of updates to OneCRL. Thanks!

Oops! Never mind. Looks like Wayne already kicked off the compat teting, per Comment #4.

Thanks, Wayne!

Comment 9

[Wayne Thayer]

TLS Canary run is temporarily available at http://18.221.138.186/runs/2019-01-18-19-01-32/

It looks good. usc.edu and mystreamplayer.com appear to be false positives. Other errors are unrelated.

CR: will you please take a look and confirm my conclusion?

Comment 10

[Christiane Ruetten [INACTIVE]]

I made a run with -x 4 to cut down on noise, and I see no regressions at all which makes me begin to doubt this result. Haven't there been any new revocations?

Comment 11

[Wayne Thayer]

22 new revocations in this update. This one doesn't contain any exceptional revocations - only intermediates that have been revoked by the CA - so it's not too surprising to me that no regressions were found.

Comment 12

[J.C. Jones [:jcj] (he/they)]

Comment on attachment 9037621 [details]
Intermediates to be revoked

Matches expected

Comment 13

[J.C. Jones [:jcj] (he/they)]

Signed at Kinto and released.

Comment 14

[Kathleen Wilson]

I confirm that these entries have been added to OneCRL. Thanks!

Comment 15

[BMO Automation]

Moving bug to Core::Security Block-lists, Allow-lists, and other State.