Portuguese Government Certification Authority - Certificate Inclusion

RESOLVED INVALID

Status

NSS
CA Certificate Root Program
--
enhancement
RESOLVED INVALID
9 years ago
8 months ago

People

(Reporter: allnetuser, Assigned: Kathleen Wilson)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(URL)

(Reporter)

Description

9 years ago
User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.7) Gecko/2009030422 Ubuntu/8.10 (intrepid) Firefox/3.0.7
Build Identifier: ALL

The Portuguese Government created their own certification authority a while ago (http://www.ecce.gov.pt/, in portuguese only). Some governmental services, such as, just for example, https://queixaselectronicas.mai.gov.pt/, intended for victims to present complaints about crimes they suffered, use certificates issued by that authority. 

When someone visits this type of governmental websites, the usual security error similar to the one presented when a website uses a self-signed certificate appears, leaving regular unaware citizens scared. Would it possible to include the "root" certificates in Firefox by default to avoid this situation?

http://www.ecce.gov.pt/certificados/ECRaizEstado.crt
http://www.ecce.gov.pt/certificados/ECCE.crt

After manually installing both certificates, the certificate chain seems to work properly.

Reproducible: Always

Steps to Reproduce:
1. Open a portuguese government website with certificates from the government certificate authority, for example: https://queixaselectronicas.mai.gov.pt/

Actual Results:  
2. Security Warning ("Get me out of Here")

Updated

9 years ago
Assignee: nobody → kathleen95014
Component: Security → CA Certificates
Product: Firefox → mozilla.org
QA Contact: firefox → ca-certificates
Version: unspecified → other

Comment 1

9 years ago
The government would need to follow the rules outlined at http://www.mozilla.org/projects/security/certs/policy/. Are you a representative of the Portuguese department that created the CA?
(Reporter)

Comment 2

9 years ago
No, unfortunately I am not. But I will point them to this bug asap.
(Assignee)

Comment 3

9 years ago
Please also point them to
https://wiki.mozilla.org/CA:How_to_apply

An official representative of this CA will need to provide the information listed in
https://wiki.mozilla.org/CA:Information_checklist
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true
(Reporter)

Comment 4

9 years ago
Update: a new contact with government representatives was attempted today.
(Assignee)

Comment 5

8 years ago
Closing this bug as invalid.  Please have an official representative of this CA create a new bug as per https://wiki.mozilla.org/CA:How_to_apply
Status: ASSIGNED → RESOLVED
Last Resolved: 8 years ago
Resolution: --- → INVALID

Updated

8 months ago
Product: mozilla.org → NSS
You need to log in before you can comment on or make changes to this bug.