378163 - Add GlobalSign root CA certificate(s) to NSS

Status: RESOLVED FIXED

(NSS :: Libraries, enhancement)

Description

[Gervase Markham [:gerv]]

This bug requests inclusion in the NSS root certificate store of the following certificate(s), owned by GlobalSign:

1) Friendly name: "GlobalSign Root CA - R2"
  SHA1 Fingerprint: 75:E0:AB:B6:13:85:12:27:1C:04:F8:5F:DD:DE:38:E4:B7:24:2E:FE
  Trust flags: Websites, Email, Code

The certificate(s) themselves will be attached momentarily.

This CA has been assessed in accordance with the Mozilla project guidelines, and the certificate(s) approved for inclusion in bug 367245.

The steps are as follows:

1) A representative of the CA must confirm that all the data in this bug is correct, and that the correct certificate(s) have been attached.

2) The Mozilla representative adds the certificate(s) to the store, and marks the bug RESOLVED FIXED.

3) Within two weeks, a representative of the CA must download a copy of the development version of Firefox and confirm (by adding a comment here) that the certificates have been correctly imported. If this does not happen, the certificates will be removed again.

4) The bug is VERIFIED.

Gerv

Comment 1

[Gervase Markham [:gerv]]

Attachment: GlobalSign Root CA - R2

Comment 2

[Steve Roylance]

The data is correct and the attachment is the correct.

Steve Roylance
Business Development Director - GlobalSign

Comment 3

[Steve Roylance]

Is it possible for someone to let me know the expected timeline for stage (2) to be completed?   I don't want to miss the 2 week slot I have to confirm the roots are correctly embedded.   I've left it a month since my reply to confirm the root data was correct.

Thanks.

Regards  Steve

Comment 4

[Gervase Markham [:gerv]]

I apologise for the delay. Please see bug 378489 for details on how to review the updated nssckbi.dll.

Gerv

Comment 5

[Steve Roylance]

The updated nssckbi.dll works correctly.  Please incorporate into the next official release of that library.  If there is any way to identify the products that use that (Web servers and browsers etc) then I would greatly apprecaite it.

Kind Regards

Steve roylance

Comment 6

[Gervase Markham [:gerv]]

Resolving FIXED. Note that this means the roots will be in NSS 3.11.8; exactly how they get into Firefox is still being worked out. We _hope_ we can find a way to get them into 2.0.0.5. No promises, though :-)

Gerv