378161 - Add QuoVadis root CA certificate(s) to NSS

Status: RESOLVED FIXED

(NSS :: Libraries, enhancement)

Description

[Gervase Markham [:gerv]]

This bug requests inclusion in the NSS root certificate store of the following certificate(s), owned by QuoVadis:

1) Friendly name: "QuoVadis Root CA 2"
   SHA1 Fingerprint: CA:3A:FB:CF:12:40:36:4B:44:B2:16:20:88:80:48:39:19:93:7C:F7
   Trust flags: Website, Email, Code

2) Friendly name: "QuoVadis Root CA 3"
   SHA1 Fingerprint: 1F:49:14:F7:D8:74:95:1D:DD:AE:02:C0:BE:FD:3A:2D:82:75:51:85
   Trust flags: Website, Email, Code

The certificate(s) themselves will be attached momentarily.

This CA has been assessed in accordance with the Mozilla project guidelines, and the certificate(s) approved for inclusion in bug 365281.

The steps are as follows:

1) A representative of the CA must confirm that all the data in this bug is correct, and that the correct certificate(s) have been attached.

2) The Mozilla representative adds the certificate(s) to the store, and marks the bug RESOLVED FIXED.

3) Within two weeks, a representative of the CA must download a copy of the development version of Firefox and confirm (by adding a comment here) that the certificates have been correctly imported. If this does not happen, the certificates will be removed again.

4) The bug is VERIFIED.

Gerv

Comment 1

[Gervase Markham [:gerv]]

Attachment: QuoVadis Root CA 2

Comment 2

[Gervase Markham [:gerv]]

Attachment: QuoVadis Root CA 3

Comment 3

[Stephen Davidson]

For QuoVadis, I confirm that the data in this bug is correct, and that the correct certificates (QuoVadis RCA 2 and RCA 3) have been attached.
Regards, Stephen Davidson, QuoVadis Limited

Comment 4

[Stephen Davidson]

Hello:  Is there an updated nssckbi.dll that we can review (or other action required from us at this stage)?  Many thanks!  Stephen Davidson, QuoVadis Limited

Comment 5

[Gervase Markham [:gerv]]

I apologise for the delay. Please see bug 378489 for details on how to review the updated nssckbi.dll.

Gerv

Comment 6

[Stephen Davidson]

We have tested the new nssckbi.dll as directed.  I confirm the accuracy (root
display, trust flags) and that the roots work as expected.
Many thanks to all of you!  Kind regards, Stephen

(also posted at bug 378489)

Comment 7

[Gervase Markham [:gerv]]

Resolving FIXED. Note that this means the roots will be in NSS 3.11.8; exactly how they get into Firefox is still being worked out. We _hope_ we can find a way to get them into 2.0.0.5. No promises, though :-)

Gerv