Last Comment Bug 208343 - Remove Baltimore root certificates
: Remove Baltimore root certificates
Status: RESOLVED FIXED
[3.7.6]
: fixed1.4
Product: NSS
Classification: Components
Component: Libraries (show other bugs)
: 3.8
: All All
: -- normal (vote)
: 3.8.1
Assigned To: Wan-Teh Chang
: Bishakha Banerjee
Mentors:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2003-06-04 15:52 PDT by Wan-Teh Chang
Modified: 2003-06-05 20:03 PDT (History)
1 user (show)
See Also:
Crash Signature:
(edit)
QA Whiteboard:
Iteration: ---
Points: ---


Attachments
Proposed patch for the NSS tip (changes to certdata.c omitted) (12.25 KB, patch)
2003-06-04 15:54 PDT, Wan-Teh Chang
no flags Details | Diff | Splinter Review
Proposed patch for NSS_3_7_BRANCH (changes to certdata.c omitted) (12.26 KB, patch)
2003-06-04 18:11 PDT, Wan-Teh Chang
no flags Details | Diff | Splinter Review
Proposed patch for NSS_3_8_BRANCH (changes to certdata.c omitted) (12.97 KB, patch)
2003-06-04 18:18 PDT, Wan-Teh Chang
rrelyea: review+
asa: approval1.4+
Details | Diff | Splinter Review

Description Wan-Teh Chang 2003-06-04 15:52:49 PDT
The following two root certificates need to be removed
from NSS's builtin list of root certificates.

1. Baltimore CyberTrust Mobile Commerce Root
Serial number 020000B8

2. Baltimore CyberTrust Code Signing Root
Serial number 020000BF
Comment 1 Wan-Teh Chang 2003-06-04 15:54:09 PDT
Created attachment 124944 [details] [diff] [review]
Proposed patch for the NSS tip (changes to certdata.c omitted)

We don't need to bump the minor version number in nssckbi.h
on the NSS trunk because NSS 3.9 hasn't been released yet.
Comment 2 Wan-Teh Chang 2003-06-04 18:11:53 PDT
Created attachment 124957 [details] [diff] [review]
Proposed patch for NSS_3_7_BRANCH (changes to certdata.c omitted)

Intended for NSS 3.7.6.
Comment 3 Wan-Teh Chang 2003-06-04 18:18:18 PDT
Created attachment 124958 [details] [diff] [review]
Proposed patch for NSS_3_8_BRANCH (changes to certdata.c omitted)
Comment 4 Wan-Teh Chang 2003-06-04 18:20:17 PDT
Comment on attachment 124958 [details] [diff] [review]
Proposed patch for NSS_3_8_BRANCH (changes to certdata.c omitted)

Bob, could you review this patch?

Hex 020000B8 is octal 002 000 000 270.
Hex 020000BF is octal 002 000 000 277.

Please verify that the serial numbers of the
removed root certificates are correct.
Comment 5 Robert Relyea 2003-06-04 18:52:08 PDT
Comment on attachment 124958 [details] [diff] [review]
Proposed patch for NSS_3_8_BRANCH (changes to certdata.c omitted)

r=relyea
Comment 6 Wan-Teh Chang 2003-06-04 19:09:01 PDT
Comment on attachment 124958 [details] [diff] [review]
Proposed patch for NSS_3_8_BRANCH (changes to certdata.c omitted)

Requesting mozilla 1.4 approval.  This is a low risk change.
Two root certificates are removed from NSS's list of builtin
root certificates.
Comment 7 Asa Dotzler [:asa] 2003-06-05 10:06:48 PDT
Comment on attachment 124958 [details] [diff] [review]
Proposed patch for NSS_3_8_BRANCH (changes to certdata.c omitted)

a=asa (on behalf of drivers) for checkin to the 1.4 branch.
Comment 8 Rafael Ebron (:rebron) 2003-06-05 10:41:03 PDT
a=adt.  Please land on branch and add fixed1.4 keyword.
Comment 9 Wan-Teh Chang 2003-06-05 15:10:42 PDT
Patch checked into the NSS tip (3.9), NSS_3_8_BRANCH (3.8.1),
NSS_3_7_BRANCH (3.7.6), and MOZILLA_1_4_BRANCH (Mozilla 1.4
final).
Comment 10 Wan-Teh Chang 2003-06-05 20:03:33 PDT
Patch checked into NSS_CLIENT_TAG (Mozilla 1.5 alpha).

Note You need to log in before you can comment on or make changes to this bug.