1834089 - CCADB entries generated 2023-05-19T17:01:27Z

Status: RESOLVED FIXED

(Core :: Security Block-lists, Allow-lists, and other State, enhancement)

Description

[Common CA Database to OneCRL Bot]

Adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.

Comment 1

[Common CA Database to OneCRL Bot]

Attachment: Line delimited issuer/serial pairs

Comment 2

[Common CA Database to OneCRL Bot]

Attachment: The additions to OneCRL proposed by this bug.

Comment 3

[Common CA Database to OneCRL Bot]

Attachment: Entries with their names decoded to plain text and hexadecimal serials/hashes.

Comment 4

[Common CA Database to OneCRL Bot]

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1834089

Comment 5

[Common CA Database to OneCRL Bot]

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1834089

Comment 6

[Kathleen Wilson]

These are the correct entries to add to OneCRL.
We do not need to run TLS Canary on this batch of changes.

Dana, Please proceed with approval at Kinto Staging.

Comment 7

[Common CA Database to OneCRL Bot]

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1834089

Comment 8

[Dana Keeler (she/her) [:keeler]]

Approved at staging.

Comment 9

[Common CA Database to OneCRL Bot]

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1834089

Comment 10

[Dana Keeler (she/her) [:keeler]]

Attachment: compare.py-output.txt

Comment 11

[Kathleen Wilson]

Looks correct. Please proceed with approving the changes at Kinto Production.

Comment 12

[Common CA Database to OneCRL Bot]

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1834089

Comment 13

[Dana Keeler (she/her) [:keeler]]

Approved in prod.

Comment 14

[Kathleen Wilson]

I have verified these have been added to OneCRL in my Firefox Nightly and Production profiles.