Closed Bug 1967751 Opened 1 year ago Closed 1 year ago

Better reflect the Root Program status of ICA records

Categories

(CA Program :: Common CA Database, enhancement, P1)

Product:
CA Program
Component:
Common CA Database
Type:
enhancement

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: chrome-root-program, Unassigned)

Details

Today, intermediate certificate records in the CCADB will show the Status of Root Cert in the page layout, but this only considers the child's parent and does not consider cross-signing relationships. Additionally, the AllCertificateRecordsReport.csv report includes intermediate certificate record values for $Program Status, but these are set by default when the certificate is added to the CCADB (root certificate values are set by Root Store Operators).

We should enhance the CCADB to:

  1. Add logic that determines if the intermediate certificate is trusted by Root Store Programs with consideration for program-specific evaluations for what makes a certificate trusted (or not).
  2. Convey $Program Status with the new logic on the intermediate certificate page layout.
  3. Ensure these changes are included in the AllCertificateRecordsReport.csv report.
Priority: -- → P1

This was included in the 30 May 2025 CCADB update.

Status: ASSIGNED → RESOLVED
Closed: 1 year ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.