1780845 - CCADB entries generated 2022-07-22T17:00:56Z

Status: RESOLVED FIXED

(Core :: Security Block-lists, Allow-lists, and other State, enhancement)

Description

[Common CA Database to OneCRL Bot]

Adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.

Comment 1

[Common CA Database to OneCRL Bot]

Attachment: Line delimited issuer/serial pairs

Comment 2

[Common CA Database to OneCRL Bot]

Attachment: The additions to OneCRL proposed by this bug.

Comment 3

[Common CA Database to OneCRL Bot]

Attachment: Entries with their names decoded to plain text and hexadecimal serials/hashes.

Comment 4

[Kathleen Wilson]

These are the correct entries to add to OneCRL.
We do not need to run TLS Canary on this batch of changes.

Dana, Please proceed with approval at Kinto Staging.

Comment 5

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Approved at staging.

Comment 6

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Attachment: onecrl-entry-checker output

Data in staging looks correct. Here's the output from onecrl-entry-checker.

Comment 7

[Kathleen Wilson]

Looks correct. Please proceed with approving the changes at Kinto Production.

Comment 8

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Approved in prod.

Comment 9

[Kathleen Wilson]

Thanks!

Comment 10

[Kathleen Wilson]

Verified in Firefox profiles. Thanks!