Closed Bug 1849702 Opened 2 years ago Closed 1 year ago

Add Taiwan-CA Inc. (TWCA) root certificates

Categories

(CA Program :: CA Certificate Root Program, task, P2)

Product:
CA Program
Component:
CA Certificate Root Program
Type:
task

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: hcli, Assigned: bwilson)

References

Details

(Whiteboard: [ca-approved] - in NSS 3.104, Firefox 131, EV enabled in FF 131)

Attachments

(3 files, 3 obsolete files)

CCADB Self Assessment Framework (v1.3) - TWCA CYBER CA 2024.xlsx
164.28 KB, application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
Details
CCADB Self Assessment Framework (v1.3) - TWCA Global CA 2024.xlsx
161.80 KB, application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
Details
TWCA Public-Trusted PKI Hierarchy.pdf
440.44 KB, application/pdf
Details
No description provided.

This bug is corresponding to CCADB case #1244 for the following root certificates:
TWCA CYBER Root CA
TWCA Global Root CA G2

Assignee: nobody → bwilson
Status: UNCONFIRMED → ASSIGNED
Type: enhancement → task
Ever confirmed: true
Whiteboard: [ca-initial]

Updated self-assessment for Global Root CA G2

Updated self-assessment for CYBER Root CA

Attached file TWCA_Hierarchy_20230630.pdf (obsolete) —
Priority: -- → P2

Mozilla Root Inclusion Case Information:
https://ccadb.my.salesforce-sites.com/mozilla/PrintViewForCase?CaseNumber=00001244

There is a pending "Add/Update Root Request" CCADB case for the roots that updates "Self-Assessment" and "Description of PKI Hierarchy" to link to the attached files in Comment 2 ~ 4 respectively.

The case mentioned in Comment 6 is finished so "Self-Assessment" and "Description of PKI Hierarchy" are updated.

Whiteboard: [ca-initial] → [ca-verifying]
Attachment #9351183 - Attachment is obsolete: true
Attachment #9351182 - Attachment is obsolete: true
Attachment #9353341 - Attachment is obsolete: true

The CPS documents, audit reports and self-assessments are updated to the latest versions.

On April 22, 2024, this request entered a six-week public discussion period. See https://groups.google.com/a/ccadb.org/g/public/c/rAsxoNILZ6A/m/vqn7iTHEAwAJ

Whiteboard: [ca-verifying] → [ca-in-discussion 2024-04-22]

The six-week discussion period has ended. https://groups.google.com/a/ccadb.org/g/public/c/rAsxoNILZ6A/m/eapyrQcjBgAJ.

Notice of intent to approve this root inclusion request was posted - https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/NqQQcki4fqs/m/BZHVSIlIAQAJ

Whiteboard: [ca-in-discussion 2024-04-22] → [ca-pending-approval] 2024-06-04

See https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/NqQQcki4fqs/m/CiycLPb5AQAJ

Whiteboard: [ca-pending-approval] 2024-06-04 → [ca-approved] - pending NSS and PSM code changes
Flags: needinfo?(bwilson)

I need to open up new NSS and PSM bugs for these: TWCA CYBER Root CA (websites trust bit with EV) and the TWCA Global Root CA G2 (email trust bit) and also include those bugs in a meta bug for the next batch of changes.

Depends on: 1908004
Flags: needinfo?(bwilson)

These roots are now in NSS 3.104 and Nightly 131.0a1 (2024-08-28). I will open a new bug to add EV for the TWCA CYBER Root CA.

Flags: needinfo?(bwilson)
Whiteboard: [ca-approved] - pending NSS and PSM code changes → [ca-approved] - pending PSM code changes
Depends on: 1915654
Flags: needinfo?(bwilson)
Whiteboard: [ca-approved] - pending PSM code changes → [ca-included] - pending PSM code changes for EV
Flags: needinfo?(bwilson)
Whiteboard: [ca-included] - pending PSM code changes for EV → [ca-approved] - in NSS 3.104, Firefox 131, EV enabled in FF 131
Status: ASSIGNED → RESOLVED
Closed: 1 year ago
Flags: needinfo?(bwilson)
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: