1850599 - [meta] November 2023 Batch of EV Changes

Status: RESOLVED FIXED

(Core :: Security: PSM, task, P1)

Description

[Kathleen Wilson]

Per bug #1688854 the request from TrustAsia Technologies, Inc. has been approved to enable the following root certificates for EV use. Please make the corresponding changes to PSM.

Friendly Name: TrustAsia Global Root CA G3
SHA-1 Fingerprint: 63CFB6C1272B56E4888E1C239AB62E814724C3C7
SHA-256 Fingerprint: E0D3226AEB1163C2E48FF9BE3B50B4C6431BE7BB1EACC5C36B5D5EC509039A08
EV Policy OID: 2.23.140.1.1
Test URL: https://ev-rsag3-valid.trustasia.com

Friendly Name: TrustAsia Global Root CA G4
SHA-1 Fingerprint: 5773A5615D80B2E6AC3882FC680731AC9FB5925A
SHA-256 Fingerprint: BE4B56CB5056C0136A526DF444508DAA36A0B54F42E4AC38F72AF470E479654C
EV Policy OID: 2.23.140.1.1
Test URL: https://ev-eccg4-valid.trustasia.com

NOTE: Bug #1850598 must be completed (the certs added to NSS), before this EV-enablement may be implemented.

Comment 1

[Ben Wilson]

Tested both test websites using https://evready-dot-ccadb-231121.appspot.com/evready, and both passed EV test.

Comment 2

[Ben Wilson]

Hi Dana, Please proceed with this batch of EV changes when you are ready.
Please let me know if I need to help in any way.
Thanks!

Comment 3

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Attachment: Bug 1850599 - EV treatment for two TrustAsia Global Root CAs r?jschanck

Comment 4

[Iulian Moraru]

Because the bot didn't comment when the patch landed on autoland I will leave this message with the revision from autoland:
https://hg.mozilla.org/integration/autoland/rev/c3c49d6a3c06a4707dbf838152ec38628bf9c4ee

Comment 5

[Narcis Beleuzu [:NarcisB]]

https://hg.mozilla.org/mozilla-central/rev/c3c49d6a3c06

Comment 6

[Ben Wilson]

Verified EV in Nightly 122.0a1 (2023-11-30)