1716034 - CCADB entries generated 2021-06-11T17:00:54Z

Status: RESOLVED FIXED

(Core :: Security Block-lists, Allow-lists, and other State, enhancement)

Description

[Common CA Database to OneCRL Bot]

Adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.

Comment 1

[Common CA Database to OneCRL Bot]

Attachment: Line delimited issuer/serial pairs

Comment 2

[Common CA Database to OneCRL Bot]

Attachment: The additions to OneCRL proposed by this bug.

Comment 3

[Common CA Database to OneCRL Bot]

Attachment: Entries with their names decoded to plain text and hexadecimal serials/hashes.

Comment 4

[Kathleen Wilson]

These are the correct entries to add to OneCRL.
We do not need to run TLS Canary on this batch of changes.

Ready for review/approval at Kinto Staging.

Comment 5

[Common CA Database to OneCRL Bot]

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1716034

Comment 6

[Common CA Database to OneCRL Bot]

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1716034

Comment 7

[Dana Keeler (she/her) [:keeler]]

Attachment: oencrl-entry-checker output

Everything looks good to me. Here's the output from onecrl-entry-checker.

Comment 8

[Common CA Database to OneCRL Bot]

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1716034

Comment 9

[Kathleen Wilson]

Looks good to me. Please proceed with approving the changes at Kinto Production.

Comment 10

[Dana Keeler (she/her) [:keeler]]

Approved in prod.

Comment 11

[Kathleen Wilson]

Verified these changes in my Firefox Nightly profile.

Thanks!

Comment 12

[Kathleen Wilson]

Verified these changes in my Firefox Release profile as well.