1697074 - Enable EV Treatment for e-commerce monitoring's GLOBALTRUST 2020 root certificate

Status: VERIFIED FIXED

(Core :: Security: PSM, task)

Description

[Kathleen Wilson]

Per bug #1627552 the request from e-commerce monitoring GmbH has been approved to enable the following root certificate for EV use. Please make the corresponding changes to PSM.

Friendly Name: GLOBALTRUST 2020
SHA-1 Fingerprint: D067C11351010CAAD0C76A65373116264F5371A2
SHA-256 Fingerprint: 9A296A5182D1D451A2E37F439B74DAAFA267523329F90F9A0D2007C334E23C9A
EV Policy: 2.23.140.1.1
Test URL: https://testok-2020-server-qualified-ev-1.e-monitoring.at

NOTE: Bug #1697071 must be completed (cert added to NSS), before this EV-enablement may be implemented.

Comment 1

[R. Martinho Fernandes [:rmf]]

Attachment: Bug 1697074 - Enable EV Treatment for e-commerce monitoring's GLOBALTRUST 2020 root certificate r=keeler

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/0b2840a4cc06
Enable EV Treatment for e-commerce monitoring's GLOBALTRUST 2020 root certificate r=keeler

Comment 3

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

https://hg.mozilla.org/mozilla-central/rev/0b2840a4cc06

Comment 4

[R. Martinho Fernandes [:rmf]]

Comment on attachment 9225016 [details]
Bug 1697074 - Enable EV Treatment for e-commerce monitoring's GLOBALTRUST 2020 root certificate r=keeler

Beta/Release Uplift Approval Request

• User impact if declined: No extended validation treatment for certificates issued by this CA
• Is this code covered by automated tests?: No
• Has the fix been verified in Nightly?: Yes
• Needs manual test from QE?: Yes
• If yes, steps to reproduce: Visit https://testok-2020-server-qualified-ev-1.e-monitoring.at and check if the padlock popup displays extended validation info.
• List of other uplifts needed: None
• Risk to taking this patch: Low
• Why is the change risky/not risky? (and alternatives if risky): The patch just adds this CA to the list of CAs who can do EV.
• String changes made/needed:

Comment 5

[Timea Cernea [:tbabos][inactive]]

Reproduced the issue on affect Firefox 90.0b5 on MacOS 10.15.
Verified-fixed on the latest Firefox Nightly 91.0a1 (2021-06-09) (64-bit) (buildID: 20210609093513) on Windows 10, MacOS 10.15 and Ubuntu 18.04.
Waiting for the Uplift process to verify further.

Comment 6

[Julien Cristau [:jcristau]]

Comment on attachment 9225016 [details]
Bug 1697074 - Enable EV Treatment for e-commerce monitoring's GLOBALTRUST 2020 root certificate r=keeler

approved for 90.0b7, thanks

Comment 7

[Julien Cristau [:jcristau]]

https://hg.mozilla.org/releases/mozilla-beta/rev/c7a5b20e75fd

Comment 8

[Timea Cernea [:tbabos][inactive]]

Verified-fixed on the latest Beta 90.0b7.