1693173 - Add GlobalSign R45, E45, R46, and E46 root certs to NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task, P1)

Description

[Kathleen Wilson]

This bug requests inclusion in the NSS root store of the following root certificates owned by GlobalSign nv-sa.

Friendly Name: GlobalSign Secure Mail Root R45
Cert Location: https://secure.globalsign.com/cacert/smimerootr45.crt
SHA-1 Fingerprint: 7618D1F380243D5240C6116AAD5777097D8130A0
SHA-256 Fingerprint: 319AF0A7729E6F89269C131EA6A3A16FCD86389FDCAB3C47A4A675C161A3F974
Trust Flags: Email

Friendly Name: GlobalSign Secure Mail Root E45
Cert Location: https://secure.globalsign.com/cacert/smimeroote45.crt
SHA-1 Fingerprint: 182E1F324F89DFBEFE8889F093C2C4A02B677521
SHA-256 Fingerprint: 5CBF6FB81FD417EA4128CD6F8172A3C9402094F74AB2ED3A06B4405D04F30B19
Trust Flags: Email

Friendly Name: GlobalSign Root R46
Cert Location: https://secure.globalsign.com/cacert/rootr46.crt
SHA-1 Fingerprint: 53A2B04BCA6BD645E6398A8EC40DD2BF77C3A290
SHA-256 Fingerprint: 4FA3126D8D3A11D1C4855A4F807CBAD6CF919D3A5A88B03BEA2C6372D93C40C9
Trust Flags: Websites
Test URL: https://valid.r46.roots.globalsign.com

Friendly Name: GlobalSign Root E46
Cert Location: https://secure.globalsign.com/cacert/roote46.crt
SHA-1 Fingerprint: 39B46CD5FE8006EBE22F4ABB0833A0AFDBB9DD84
SHA-256 Fingerprint: CBB9C44D84B8043E1050EA31A69F514955D7BFD2E2C6B49301019AD61D9F5058
Trust Flags: Websites
Test URL: https://valid.e46.roots.globalsign.com

This CA has been assessed in accordance with the Mozilla project guidelines, and the certificates approved for inclusion in bug #1637269 and in bug #1570724

The next steps are as follows:

1. A representative of the CA must confirm that all the data in this bug is correct, and that the correct certificates have been attached.
2. A Mozilla representative creates a patch with the new certificates.
3. The Mozilla representative requests that another Mozilla representative review the patch.
4. The Mozilla representative adds (commits) the patch to NSS, then closes this bug as RESOLVED FIXED.
5. At some time after that, various Mozilla products will move to using a version of NSS which contains the certificate. This process is mostly under the control of the release drivers for those products.

Comment 1

[Kathleen Wilson]

Attachment: GlobalSignSecureMailRootE45.crt

Comment 2

[Kathleen Wilson]

Attachment: GlobalSignSecureMailRootR45.crt

Comment 3

[Kathleen Wilson]

Attachment: GlobalSignRootE46.crt

Comment 4

[Kathleen Wilson]

Attachment: GlobalSignRootR46.crt

Comment 5

[Kathleen Wilson]

Julie, Please see step #1 above.

Comment 6

[Julie Olson]

Hi Kathleen, I have confirmed the information for the roots listed above is correct.

Thank you!

Comment 7

[Benjamin Beurdouche [:beurdouche]]

Attachment: Bug 1693173 - Add GlobalSign R45, E45, R46, and E46 root certs to NSS. r=KathleenWilson

Depends on D105448

Comment 8

[Benjamin Beurdouche [:beurdouche]]

https://hg.mozilla.org/projects/nss/rev/bcf5e159d4546fc620ff874ec3330550292bb214