1860670 - Add four Commscope root certificates to NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task, P1)

Description

[Ben Wilson]

This bug requests inclusion in the NSS root store of the following root certificates owned by Commscope:

Root Certificate 1 of 4
Friendly Name: CommScope Public Trust ECC Root-01
Cert Location: https://cert.pkiworks.com/Public/DownloadCert/CommScope%20Public%20Trust%20ECC%20Root%2D01
SHA-1 Fingerprint: 0786C0D8DD8EC080980698D0587AEFDEA6CCA25D
SHA-256 Fingerprint: 11437CDA7BB45E41365F45B39A38986B0DE00DEF348E0C7BB0873633800BC38B
Trust Flags: Websites
Test URL: https://ecc-current.ca-1.test.pkiworks.com

Root Certificate 2 of 4
Friendly Name: CommScope Public Trust ECC Root-02
Cert Location: https://cert.pkiworks.com/Public/DownloadCert/CommScope%20Public%20Trust%20ECC%20Root%2D02
SHA-1 Fingerprint: 3C3FEF570FFE6593869EA0FEB0F6ED8ED113C7E5
SHA-256 Fingerprint: 2FFB7F813BBBB3C89AB4E8162D0F16D71509A830CC9D73C262E5140875D1AD4A
Trust Flags: Websites
Test URL: https://ecc-current.ca-2.test.pkiworks.com

Root Certificate 3 of 4
Friendly Name: CommScope Public Trust RSA Root-01
Cert Location: https://cert.pkiworks.com/Public/DownloadCert/CommScope%20Public%20Trust%20RSA%20Root%2D01
SHA-1 Fingerprint: 6D0A5FF7B42306B485B3B79764FCAC75F533F293
SHA-256 Fingerprint: 02BDF96E2A45DD9BF18FC7E1DBDF21A0379BA3C9C2610344CFD8D606FEC1ED81
Trust Flags: Websites
Test URL: https://rsa-current.ca-1.test.pkiworks.com

Root Certificate 4 of 4
Friendly Name: CommScope Public Trust RSA Root-02
Cert Location: https://cert.pkiworks.com/Public/DownloadCert/CommScope%20Public%20Trust%20RSA%20Root%2D02
SHA-1 Fingerprint: EAB0E2521B89934C1168F2D89AAC224CA38A57AE
SHA-256 Fingerprint: FFE943D793424B4F7C440C1C3D648D5363F34B82DC87AA7A9F118FC5DEE101F1
Trust Flags: Websites
Test URL: https://rsa-current.ca-2.test.pkiworks.com

The CA has been assessed in accordance with the Mozilla project guidelines, and the certificates approved for inclusion in bug #1763177

The next steps are as follows:

1. A representative of the CA must confirm that all the data in this bug is correct, and that the correct certificates have been attached.
2. A Mozilla representative creates a patch with the new certificates.
3. The Mozilla representative requests that another Mozilla representative review the patch.
4. The Mozilla representative adds (commits) the patch to NSS, then closes this bug as RESOLVED FIXED.
5. At some time after that, various Mozilla products will move to using a version of NSS which contains the certificates. This process is mostly under the control of the release drivers for those products.

Comment 1

[Ben Wilson]

Attachment: CommScope Public Trust ECC Root-01.cer

Comment 2

[Ben Wilson]

Attachment: CommScope Public Trust ECC Root-02.cer

Comment 3

[Ben Wilson]

Attachment: CommScope Public Trust RSA Root-01.cer

Comment 4

[Ben Wilson]

Attachment: CommScope Public Trust RSA Root-02.cer

Comment 5

[Ben Wilson]

Nicol,
Please see step #1 above and add a comment to this bug that you have reviewed the information and attached files and that they are correct.
Thanks,
Ben

Comment 6

[Nicol So]

I confirm that the correct root CA certificates have been attached and that the associated information about them in this Bugzilla case is correct.

Comment 7

[Dennis Jackson]

Attachment: Bug 1860670 - Add four Commscope root certificates to NSS. r=#nss-reviewers,bwilson

Depends on D193333

Comment 8

[Dennis Jackson]

https://hg.mozilla.org/projects/nss/rev/055a0ebbc150a7e444c7ba4dcf6d8f2872d85529