Remove Baltimore root certificates

RESOLVED FIXED in 3.8.1

Status

NSS
Libraries
RESOLVED FIXED
14 years ago
14 years ago

People

(Reporter: Wan-Teh Chang, Assigned: Wan-Teh Chang)

Tracking

({fixed1.4})

3.8.1
fixed1.4

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [3.7.6])

Attachments

(3 attachments)

(Assignee)

Description

14 years ago
The following two root certificates need to be removed
from NSS's builtin list of root certificates.

1. Baltimore CyberTrust Mobile Commerce Root
Serial number 020000B8

2. Baltimore CyberTrust Code Signing Root
Serial number 020000BF
(Assignee)

Comment 1

14 years ago
Created attachment 124944 [details] [diff] [review]
Proposed patch for the NSS tip (changes to certdata.c omitted)

We don't need to bump the minor version number in nssckbi.h
on the NSS trunk because NSS 3.9 hasn't been released yet.
(Assignee)

Comment 2

14 years ago
Created attachment 124957 [details] [diff] [review]
Proposed patch for NSS_3_7_BRANCH (changes to certdata.c omitted)

Intended for NSS 3.7.6.
(Assignee)

Comment 3

14 years ago
Created attachment 124958 [details] [diff] [review]
Proposed patch for NSS_3_8_BRANCH (changes to certdata.c omitted)
(Assignee)

Comment 4

14 years ago
Comment on attachment 124958 [details] [diff] [review]
Proposed patch for NSS_3_8_BRANCH (changes to certdata.c omitted)

Bob, could you review this patch?

Hex 020000B8 is octal 002 000 000 270.
Hex 020000BF is octal 002 000 000 277.

Please verify that the serial numbers of the
removed root certificates are correct.
Attachment #124958 - Flags: review?(relyea)

Comment 5

14 years ago
Comment on attachment 124958 [details] [diff] [review]
Proposed patch for NSS_3_8_BRANCH (changes to certdata.c omitted)

r=relyea
Attachment #124958 - Flags: review?(relyea) → review+
(Assignee)

Comment 6

14 years ago
Comment on attachment 124958 [details] [diff] [review]
Proposed patch for NSS_3_8_BRANCH (changes to certdata.c omitted)

Requesting mozilla 1.4 approval.  This is a low risk change.
Two root certificates are removed from NSS's list of builtin
root certificates.
Attachment #124958 - Flags: approval1.4?

Comment 7

14 years ago
Comment on attachment 124958 [details] [diff] [review]
Proposed patch for NSS_3_8_BRANCH (changes to certdata.c omitted)

a=asa (on behalf of drivers) for checkin to the 1.4 branch.
Attachment #124958 - Flags: approval1.4? → approval1.4+
a=adt.  Please land on branch and add fixed1.4 keyword.
(Assignee)

Comment 9

14 years ago
Patch checked into the NSS tip (3.9), NSS_3_8_BRANCH (3.8.1),
NSS_3_7_BRANCH (3.7.6), and MOZILLA_1_4_BRANCH (Mozilla 1.4
final).
Status: NEW → RESOLVED
Last Resolved: 14 years ago
Keywords: fixed1.4
Resolution: --- → FIXED
Whiteboard: [3.7.6]
Target Milestone: --- → 3.8.1
(Assignee)

Comment 10

14 years ago
Patch checked into NSS_CLIENT_TAG (Mozilla 1.5 alpha).
You need to log in before you can comment on or make changes to this bug.