1849702 - Add Taiwan-CA Inc. (TWCA) root certificates

Status: ASSIGNED

(CA Program :: CA Certificate Root Program, task, P2)

Comment 1

[Hao-Chun Li]

This bug is corresponding to CCADB case #1244 for the following root certificates:
TWCA CYBER Root CA
TWCA Global Root CA G2

Comment 2

[Hao-Chun Li]

Attachment: CCADB Self Assessment Framework (v1.2) - TWCA Global CA 202309.xlsx

Updated self-assessment for Global Root CA G2

Comment 3

[Hao-Chun Li]

Attachment: CCADB Self Assessment Framework (v1.2) - TWCA Cyber CA 202309.xlsx

Updated self-assessment for CYBER Root CA

Comment 4

[Hao-Chun Li]

Attachment: TWCA_Hierarchy_20230630.pdf

Comment 5

[Hao-Chun Li]

Mozilla Root Inclusion Case Information:
https://ccadb.my.salesforce-sites.com/mozilla/PrintViewForCase?CaseNumber=00001244

Comment 6

[Hao-Chun Li]

There is a pending "Add/Update Root Request" CCADB case for the roots that updates "Self-Assessment" and "Description of PKI Hierarchy" to link to the attached files in Comment 2 ~ 4 respectively.

Comment 7

[Hao-Chun Li]

The case mentioned in Comment 6 is finished so "Self-Assessment" and "Description of PKI Hierarchy" are updated.

Comment 8

[Hao-Chun Li]

Attachment: CCADB Self Assessment Framework (v1.3) - TWCA CYBER CA 2024.xlsx

Comment 9

[Hao-Chun Li]

Attachment: CCADB Self Assessment Framework (v1.3) - TWCA Global CA 2024.xlsx

Comment 10

[Hao-Chun Li]

Attachment: TWCA Public-Trusted PKI Hierarchy.pdf

Comment 11

[Hao-Chun Li]

The CPS documents, audit reports and self-assessments are updated to the latest versions.

Comment 12

[Ben Wilson]

On April 22, 2024, this request entered a six-week public discussion period. See https://groups.google.com/a/ccadb.org/g/public/c/rAsxoNILZ6A/m/vqn7iTHEAwAJ

Comment 13

[Ben Wilson]

The six-week discussion period has ended. https://groups.google.com/a/ccadb.org/g/public/c/rAsxoNILZ6A/m/eapyrQcjBgAJ.

Comment 14

[Ben Wilson]

Notice of intent to approve this root inclusion request was posted - https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/NqQQcki4fqs/m/BZHVSIlIAQAJ

Comment 15

[Ben Wilson]

See https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/NqQQcki4fqs/m/CiycLPb5AQAJ

Comment 16

[Ben Wilson]

I need to open up new NSS and PSM bugs for these: TWCA CYBER Root CA (websites trust bit with EV) and the TWCA Global Root CA G2 (email trust bit) and also include those bugs in a meta bug for the next batch of changes.

Comment 17

[Ben Wilson]

These roots are now in NSS 3.104 and Nightly 131.0a1 (2024-08-28). I will open a new bug to add EV for the TWCA CYBER Root CA.