Closed Bug 1965541 Opened 1 year ago Closed 1 year ago

CCADB entries generated 2025-05-09T17:00:52Z

Categories

(Core :: Security Block-lists, Allow-lists, and other State, enhancement)

enhancement
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: ccadb2onercl, Assigned: bwilson)

Details

Attachments

(4 files)

Adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1965541

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1965541

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1965541

Assignee: nobody → bwilson
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1965541

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1965541

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1965541

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1965541

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1965541

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1965541

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1965541

I would like to add this CA certificate to the current batch of certificates to be added to OneCRL:
Subject
CN=SZAFIR Trusted CA3; O=Krajowa Izba Rozliczeniowa S.A.; C=PL
Issuer
CN=SZAFIR ROOT CA2; O=Krajowa Izba Rozliczeniowa S.A.; C=PL
Valid From (GMT)
10/11/2023
Valid To (GMT)
10/11/2033
Certificate Serial Number
7E4EE2F86D2A1180E9C91EA20FD9112F63DC5452
Revocation date
3/5/2025

{
"issuerName": "MFExCzAJBgNVBAYTAlBMMSgwJgYDVQQKDB9LcmFqb3dhIEl6YmEgUm96bGljemVuaW93YSBTLkEuMRgwFgYDVQQDDA9TWkFGSVIgUk9PVCBDQTI=",
"serialNumber": "fk7i+G0qEYDpyR6iD9kRL2PcVFI=",
"enabled": true,
"details": {
"who": "",
"created": "",
"bug": "1965541",
"name": "",
"why": ""
}
}

I have manually added the intermediate CA certificate for SZAFIR Trusted CA3 into remote-settings-staging.
There are now a total of 15 CA certificate entries in this batch that should be added to OneCRL.

Flags: needinfo?(dkeeler)

Changes are still in review. The following bugs appear to require resolution.
https://bugzilla.mozilla.org/show_bug.cgi?id=1965541

I had to use remote-settings.mozilla.org instead of firefox.settings.services.mozilla.com, etc. in the entry checker I think due to caching, but the entries in remote settings are consistent.

Flags: needinfo?(dkeeler)

The entries in the output from onecrl-entry-checker are correct. Please proceed with approving the changes in Production. Thanks!

Flags: needinfo?(dkeeler)

Approved in prod.

Flags: needinfo?(dkeeler)

These 15 revoked CA certificates are now in OneCRL and my Firefox profile.

Status: ASSIGNED → RESOLVED
Closed: 1 year ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: