1663049 - Add SecureTrust's Trustwave Global root certificates to NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, enhancement)

Description

[Kathleen Wilson]

This bug requests inclusion in the NSS root store of the following root certificates owned by SecureTrust.

Friendly Name: Trustwave Global Certification Authority
Cert Location: https://certs.securetrust.com/CA/TWGCA.txt
SHA-256 Fingerprint: 97552015F5DDFC3C8788C006944555408894450084F100867086BC1A2BB58DC8
Trust Flags: Email; Websites
Test URL: https://twgcatest.trustwave.com

Friendly Name: Trustwave Global ECC P256 Certification Authority
Cert Location: https://certs.securetrust.com/CA/TWGP256CA.txt
SHA-256 Fingerprint: 945BBC825EA554F489D1FD51A73DDF2EA624AC7019A05205225C22A78CCFA8B4
Trust Flags: Email; Websites
Test URL: https://twgp256catest.trustwave.com

Friendly Name: Trustwave Global ECC P384 Certification Authority
Cert Location: https://certs.securetrust.com/CA/TWGP384CA.txt
SHA-256 Fingerprint: 55903859C8C0C3EBB8759ECE4E2557225FF5758BBD38EBD48276601E1BD58097
Trust Flags: Email; Websites
Test URL: https://twgp384catest.trustwave.com

This CA has been assessed in accordance with the Mozilla project guidelines, and the certificates approved for inclusion in bug #1528369

The next steps are as follows:

1. A representative of the CA must confirm that all the data in this bug is correct, and that the correct certificates have been attached.
2. A Mozilla representative creates a patch with the new certificates, and provides a special test version of Firefox.
3. A representative of the CA uses the test version of Firefox to confirm (by adding a comment in this bug) that the certificates have been correctly imported and that websites work correctly.
4. The Mozilla representative requests that another Mozilla representative review the patch.
5. The Mozilla representative adds (commits) the patch to NSS, then closes this bug as RESOLVED FIXED.
6. At some time after that, various Mozilla products will move to using a version of NSS which contains the certificates. This process is mostly under the control of the release drivers for those products.

Comment 1

[Kathleen Wilson]

Attachment: Trustwave Global Certification Authority.crt

Comment 2

[Kathleen Wilson]

Attachment: Trustwave Global ECC P256 Certification Authority.crt

Comment 3

[Kathleen Wilson]

Attachment: Trustwave Global ECC P384 Certification Authority.crt

Comment 4

[Kathleen Wilson]

Corey, Please see step #1 above.

Comment 5

[Corey Bonnell]

I have confirmed that all data in this bug is correct and that the attached files match the root certificates described in this bug.

Comment 6

[Kevin Jacobs [:kjacobs]]

Attachment: Bug 1663049 - Add SecureTrust's Trustwave Global root certificates to NSS. r?KathleenWilson,jcj

Depends on D89842

Comment 7

[Kevin Jacobs [:kjacobs]]

Attachment: Bug 1663049 - September 2020 batch of root changes, NSS_BUILTINS_LIBRARY_VERSION 2.44. r?jcj

Comment 8

[Kevin Jacobs [:kjacobs]]

https://hg.mozilla.org/projects/nss/rev/7dfc054a983eb72d522f5641ceaaf37a4d81b87f
https://hg.mozilla.org/projects/nss/rev/141ef83ac10b373598a6dd7d9d842474a52a0ada