1678378 - CCADB entries generated 2020-11-19T17:00:53Z

Status: RESOLVED FIXED

(Core :: Security Block-lists, Allow-lists, and other State, enhancement)

Description

[Common CA Database to OneCRL Bot]

Adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.

Comment 1

[Common CA Database to OneCRL Bot]

Attachment: Line delimited issuer/serial pairs

Comment 2

[Common CA Database to OneCRL Bot]

Attachment: The additions to OneCRL proposed by this bug.

Comment 3

[Common CA Database to OneCRL Bot]

Attachment: Entries with their names decoded to plain text and hexadecimal serials/hashes.

Comment 4

[J.C. Jones [:jcj] (he/they)]

Attachment: onecrl entry checker

Comment 5

[Kathleen Wilson]

I confirm that these are the correct entries to add to OneCRL.

We shouldn't need to run TLS Canary on this set of changes, because these revocations happened a while ago and have already been added to other root store equivalents of OneCRL.

Comment 6

[J.C. Jones [:jcj] (he/they)]

Approved at STAGE.

Comment 7

[J.C. Jones [:jcj] (he/they)]

Approved at PROD.

Comment 8

[BMO Automation]

Moving bug to Core::Security Block-lists, Allow-lists, and other State.