Closed Bug 2014327 Opened 5 months ago Closed 4 months ago

expand intermediate preloading to also include intermediates that chain through cross-signed roots

Categories

(Core :: Security: PSM, enhancement)

Product:
Core
Component:
Security: PSM
Type:
enhancement

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: keeler, Assigned: jschanck)

References

Details

(Whiteboard: [psm-assigned])

Currently, the set of intermediates that goes into intermediate preloading consists of intermediates that chain up to Mozilla roots. However, the implementation that produces this set of intermediates does not consider intermediates that can chain up to Mozilla roots via cross-signed non-Mozilla roots. These should be included as well for more complete coverage.

See Also: → 2012294

The changes in https://github.com/mozilla/crlite/pull/379 resulted in 114 new intermediates being added to the preloading collection, including the intermediate responsible for Bug 2012294.

Status: NEW → RESOLVED
Closed: 4 months ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.