424154 - Enable thawte Primary Root CA for EV

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement)

Description

[Frank Hecker]

Per bug 407163 I've approved enabling the thawte Primary Root CA certificate for Extended Validation use. The corresponding EV policy OID is 2.16.840.1.113733.1.7.48.1.

Marking this bug as dependent on first adding the root in question to NSS (bug
424152).

Comment 1

[Kai Engert [:KaiE:]]

+  {
+    // CN=thawte Primary Root CA,OU="(c) 2006 thawte, Inc. - For authorized use only",OU=Certification Services Division,O="thawte, Inc.",C=US
+    "2.16.840.1.113733.1.7.48.1",
+    "Thawte EV OID",
+    SEC_OID_UNKNOWN,
+    "91:C6:D6:EE:3E:8A:C8:63:84:E5:48:C2:99:29:5C:75:6C:81:7B:81",
+    "MIGpMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMSgwJgYDVQQL"
+    "Ex9DZXJ0aWZpY2F0aW9uIFNlcnZpY2VzIERpdmlzaW9uMTgwNgYDVQQLEy8oYykg"
+    "MjAwNiB0aGF3dGUsIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTEfMB0G"
+    "A1UEAxMWdGhhd3RlIFByaW1hcnkgUm9vdCBDQQ==",
+    "NE7VVyDV7exJ9C/ON9srbQ==",
+    nsnull
+  },

The patch to add this is in bug 425518.
Please speak up if you think the above information is wrong.

Comment 2

[Kai Engert [:KaiE:]]

Can you please file another bug against NSS (and assign it to me) once the additional trust flags are approved? Thanks.

Comment 3

[Kai Engert [:KaiE:]]

(In reply to comment #2)
> Can you please file another bug against NSS (and assign it to me) once the
> additional trust flags are approved? Thanks.

Sorry, I wanted to add this comment to a different bug...

Comment 4

[Kai Engert [:KaiE:]]

This request has been completed minutes ago with the patch for bug 425518.

marking fixed