418701 - Enable Quo Vadis root CA certificate for EV use

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement)

Description

[Frank Hecker]

Per bug 403665 I've approved enabling Quo Vadis's existing root CA certificate
(QuoVadis Root CA 2) for Extended Validation use. The corresponding EV policy OID is 1.3.6.1.4.1.8024.0.2.100.1.2.

Thanks in advance for your help getting this change made to PSM!

Comment 1

[Kai Engert (:KaiE:)]

Attachment: Patch v1

This patch
+
having the required intermediates installed manually
  (I visited http://trust.quovadisglobal.com/qvsslica.crt 
   but clicked cancel, which seems to have installed the valid intermediate)
+
visiting the demo site 
  https://www.boxoffice.bm/SignIn.asp
=
  I get the EV identity UI

Comment 2

[Robert Relyea]

Comment on attachment 304764 [details] [diff] [review]
Patch v1

r+

Comment 3

[Mike Beltzner [:beltzner, not reading bugmail]]

Comment on attachment 304764 [details] [diff] [review]
Patch v1

a=beltzner for 1.9

Comment 4

[Kai Engert (:KaiE:)]

fixed.

Comment 5

[Kai Engert (:KaiE:)]

forgot to mark as fixed

Comment 6

[Johnathan Nightingale [:johnath]]

Quoting from bug 403665:

> Hello:  QuoVadis EV certs were showing the correct EV indicators properly in
> the nightlies until the past few days when uniformly they started acting like
> plain SSL again.  Is this known/expected?
> Best, Stephen

Kai - should we reopen?  Or is there a known regression here?

Comment 7

[Kai Engert (:KaiE:)]

I'm ok to reopen, although the task requested in this bug has been completed successfully. It might be this is a variation of bug 406755. I want to hear answers to my latest question in bug 403665.

Comment 8

[Kai Engert (:KaiE:)]

The latest patch in bug 406755 fixes the issue for me.
I think bug 406755 should be marked as blocking.

Comment 9

[Kai Engert (:KaiE:)]

I'm resolving this as fixed again.
The bug should be fixed with today's checkins for bug 420151 and bug 406755.