1645192 - Enable EV Treatment for "certSIGN Root CA G2" root certificate

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement)

Description

[Kathleen Wilson]

Per bug #1403453 the request from certSIGN has been approved to enable the following root certificate for EV use. Please make the corresponding changes to PSM.

Friendly Name: certSIGN Root CA G2
SHA-1 Fingerprint: 26F993B4ED3D2827B0B94BA7E9151DA38D92E532
SHA-256 Fingerprint: 657CFE2FA73FAA38462571F332A2363A46FCE7020951710702CDFBB6EEDA3305
EV Policy OID: 2.23.140.1.1
Test URL: https://testssl-valid-evcp.certsign.ro/

Note dependency on root inclusion, bug #1645186.

Comment 1

[Kathleen Wilson]

This root cert has been added to NSS 3.54 and Firefox 79, so is ready for EV treatment to be enabled.

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Martinho, do you want to take care of this? Moritz or Kevin can give you some pointers on how to do this. See also recent changes here: https://hg.mozilla.org/mozilla-central/log/tip/security/certverifier/ExtendedValidation.cpp

Comment 3

[R. Martinho Fernandes [:rmf]]

Attachment: Bug 1645192 - Enable EV Treatment for "certSIGN Root CA G2" root certificate

Comment 4

[R. Martinho Fernandes [:rmf]]

That should do it :)

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/764fc78fec88
Enable EV Treatment for "certSIGN Root CA G2" root certificate r=keeler

Comment 6

[Noemi Erli[:noemi_erli]]

https://hg.mozilla.org/mozilla-central/rev/764fc78fec88