418910 - Enable Trustwave SecureTrust CA and Secure Global CA root CA certificate for EV use

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement)

Description

[Frank Hecker]

Per bug 409837 and bug 409838 I've approved adding Trustwave's "SecureTrust CA" and "Secure Global CA" root CA certificates and enabling them for Extended Validation use. The EV policy OID for both certificates is 2.16.840.1.114404.1.1.2.4.1.

Thanks in advance for your help getting this change made to PSM!

Comment 1

[Frank Hecker]

Marking this bug as dependent on bug 418907, since the roots have to first be added to NSS.

Comment 2

[Kai Engert (:KaiE:)]

no patch yet, but here's a snippet I used for testing:

  {
    // CN=SecureTrust CA,O=SecureTrust Corporation,C=US
    "2.16.840.1.114404.1.1.2.4.1",
    "Trustwave EV OID",
    SEC_OID_UNKNOWN,
    "87:82:C6:C3:04:35:3B:CF:D2:96:92:D2:59:3E:7D:44:D9:34:FF:11",
    "MEgxCzAJBgNVBAYTAlVTMSAwHgYDVQQKExdTZWN1cmVUcnVzdCBDb3Jwb3JhdGlv"
    "bjEXMBUGA1UEAxMOU2VjdXJlVHJ1c3QgQ0E=",
    "DPCOXAgWpa1Cf/DrJxhZ0A==",
    nsnull
  },
  {
    // CN=Secure Global CA,O=SecureTrust Corporation,C=US
    "2.16.840.1.114404.1.1.2.4.1",
    "Trustwave EV OID",
    SEC_OID_UNKNOWN,
    "3A:44:73:5A:E5:81:90:1F:24:86:61:46:1E:3B:9C:C4:5F:F5:3A:1B",
    "MEoxCzAJBgNVBAYTAlVTMSAwHgYDVQQKExdTZWN1cmVUcnVzdCBDb3Jwb3JhdGlv"
    "bjEZMBcGA1UEAxMQU2VjdXJlIEdsb2JhbCBDQQ==",
    "B1YipOjUiolN9BPI8PjqpQ==",
    nsnull
  },

Comment 3

[Kai Engert (:KaiE:)]

The patch to add this is in bug 425518.
Please speak up if you think the above information is wrong.

Comment 4

[Kai Engert (:KaiE:)]

This request has been completed minutes ago with the patch for bug 425518.

marking fixed