1787075 - Add 2 DigitalSign root certificates to NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Kathleen Wilson]

This bug requests inclusion in the NSS root store of the following root certificates owned by DigitalSign - Certificadora Digital, S.A.

Friendly Name: DIGITALSIGN GLOBAL ROOT RSA CA
Cert Location: http://root-rsa.digitalsign.pt/DIGITALSIGNGLOBALROOTRSACA.cer
SHA-1 Fingerprint: B9820797AE52A5686F4607DFFD03723D9286882D
SHA-256 Fingerprint: 82BD5D851ACF7F6E1BA7BFCBC53030D0E7BC3C21DF772D858CAB41D199BDF595
Trust Flags: Email

Friendly Name: DIGITALSIGN GLOBAL ROOT ECDSA CA
Cert Location: http://root-ecdsa.digitalsign.pt/DIGITALSIGNGLOBALROOTECDSACA.cer
SHA-1 Fingerprint: 67A808EB8F88F5806C05451B17F3D7002FD24A8A
SHA-256 Fingerprint: 261D7114AE5F8FF2D8C7209A9DE4289E6AFC9D717023D85450909199F1857CFE
Trust Flags: Email

This CA has been assessed in accordance with the Mozilla project guidelines, and the certificates approved for inclusion in bug #1694421

The next steps are as follows:

1. A representative of the CA must confirm that all the data in this bug is correct, and that the correct certificates have been attached.
2. A Mozilla representative creates a patch with the new certificates.
3. The Mozilla representative requests that another Mozilla representative review the patch.
4. The Mozilla representative adds (commits) the patch to NSS, then closes this bug as RESOLVED FIXED.
5. At some time after that, various Mozilla products will move to using a version of NSS which contains the certificates. This process is mostly under the control of the release drivers for those products.

Comment 1

[Kathleen Wilson]

Attachment: DIGITALSIGNGLOBALROOTRSACA.cer

Comment 2

[Kathleen Wilson]

Attachment: DIGITALSIGNGLOBALROOTECDSACA.cer

Comment 3

[Kathleen Wilson]

Francisco, Please see step #1 above.

Comment 4

[Francisco Marques]

(In reply to Kathleen Wilson from comment #3)

Francisco, Please see step #1 above.

Dear Kathleen Wilson,
The data presented in this bug is correct, you can proceed with this request.

Comment 5

[John Schanck [:jschanck]]

Attachment: Bug 1787075 - Add two DigitalSign root certificates to NSS. r=KathleenWilson

Depends on D156581

Comment 6

[John Schanck [:jschanck]]

https://hg.mozilla.org/projects/nss/rev/04200c0488ee6642825b40e6190fddc0430d8d06