426572 - Enable COMODO Certificate Authority for EV

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement)

Description

[Frank Hecker]

Per bug 401587 I've approved enabling the COMODO Certification Authority root for Extended Validation use. The corresponding EV policy OID is 1.3.6.1.4.1.6449.1.2.1.5.1.

Marking this bug as dependent on first adding the root in question to NSS (bug
426568).

The CA should verify that the above EV policy OID is correct.

Comment 1

[Kai Engert [:KaiE:]]

+  {
+    // CN=COMODO Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
+    "1.3.6.1.4.1.6449.1.2.1.5.1",
+    "Comodo EV OID",
+    SEC_OID_UNKNOWN,
+    "66:31:BF:9E:F7:4F:9E:B6:C9:D5:A6:0C:BA:6A:BE:D1:F7:BD:EF:7B",
+    "MIGBMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAw"
+    "DgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDEnMCUG"
+    "A1UEAxMeQ09NT0RPIENlcnRpZmljYXRpb24gQXV0aG9yaXR5",
+    "ToEtioJl4AsC7j41AkblPQ==",
+    nsnull
+  },


The patch to add this is in bug 425518.
Please speak up if you think the above information is wrong.

Comment 2

[Rob Stradling]

(in reply to comment #1)

Kai, this information is all correct.

Thanks.

Comment 3

[Kai Engert [:KaiE:]]

This request has been completed minutes ago with the patch for bug 425518.

marking fixed