1586081 - Remove special EV treatment from GlobalSign Extended Validation CA - SHA256 - G2

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement, P1)

Description

[Kathleen Wilson]

The "GlobalSign Extended Validation CA - SHA256 - G2" cert has been revoked, so we should remove the special case code that was implemented to continue EV treatment for this intermediate cert.

References:
https://bugzilla.mozilla.org/show_bug.cgi?id=1349762#c4
https://bugzilla.mozilla.org/show_bug.cgi?id=1347882#c14

Comment 1

[Marcus Burghardt]

Attachment: Bug 1586081 - Remove special EV treatment from GlobalSign Extended Validation CA - SHA256 - G2. r=keeler

Comment 2

[Dana Keeler (she/her) (use needinfo) (:keeler for reviews)]

Kathleen, do we still want to give EV treatment to certificates where the trust anchor is GlobalSign Root CA - R2?

Comment 3

[Kathleen Wilson]

(In reply to Dana Keeler (she/her) (use needinfo) (:keeler for reviews) from comment #2)

Kathleen, do we still want to give EV treatment to certificates where the trust anchor is GlobalSign Root CA - R2?

No. The GlobalSign Root CA - R2 root should not have EV treatment.

Comment 4

[Marcus Burghardt]

Ok. Patch updated.

Comment 5

[Kathleen Wilson]

(In reply to Marcus Burghardt from comment #4)

Ok. Patch updated.

Looks good to me. Thanks!

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/6f4eedc9e6bc
Remove special EV treatment from GlobalSign Extended Validation CA - SHA256 - G2. r=keeler

Comment 7

[Arthur Iakab [arthur_iakab]]

https://hg.mozilla.org/mozilla-central/rev/6f4eedc9e6bc