1778605 - Switch Audit Reminder emails to monthly email based on CA Task List Reports

Status: RESOLVED FIXED

(CA Program :: Common CA Database, task)

Description

[Kathleen Wilson]

CA Task List reports were updated per Bug #1734497 to include status based on each participating root store. After each root store gets all of their data in the CCADB current, the plan is to switch from having separate monthly email for each root store to having one monthly audit reminder email for all participating root stores.

Comment 1

[Kathleen Wilson]

• To be sent on 3rd Tuesday of each month
• When either the "Root Certificates with Outdated Audit Statements" or the "Intermediate Certificates with Outdated Audit Statements" CA Task List reports are non-empty for the CA.
• When this email is enabled, remember to turn off the current Mozilla and Microsoft audit reminder emails.
• Kathleen: Move CCADB email template information from https://wiki.mozilla.org/CA/Email_templates to CCADB Google Workspace
• Moved to Bug #1799000 - Currently Kathleen provides a summary to MDSP of the audit reminder emails for root and intermediate certificates. Do we want to have the CCADB send the summary email to [e-mail]? Or do we want to just provide a public-facing report?

~~ Email Template ~~
From: [e-mail]
TO: <Primary POC>
CC: <POCs, only if Alias1 and Alias2 null> and <Alias1 & Alias2>

Subject: CCADB Action Required: Provide Updated Audit Statements

Your CA has the following items that need to be resolved in the CCADB. Please login to the CCADB to see the full list on your home page.

• Root Certificates with Outdated Audit Statements (2)
• Intermediate Certificates with Outdated Audit Statements (11)

Instructions may be found at www.ccadb.org/cas.

If you need help, contact [e-mail] or the appropriate root store email address that is listed on your CCADB home page.

Regards,
CCADB Team

Comment 2

[Poonam Bhargava]

These changes are done in the sandbox. Waiting to final feedback.

Comment 3

[Kathleen Wilson]

Please move the changes to production and do a dry run without actually sending the email. And provide a report like you did in Sandbox, so we can easily check the results.

Comment 4

[Kathleen Wilson]

I have announced this change in MDSP:
https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/Gzw3Q5bGi-o/m/KAgC45sOAwAJ

Comment 5

[Kathleen Wilson]

Ready to go live with this. Thanks!

Comment 6

[Poonam Bhargava]

Moved the following batch programs in production.

• Audit reminder emails based on CA Task List
• Summary email for outdated root certs
• Summary email for outdated intermediate certs

Turned off older email batch programs for Mozilla and Microsoft for outdated root certs.

Comment 7

[Kathleen Wilson]

Live in CCADB production. Thanks!