487718 - Add 3 new roots to NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Kai Engert [:KaiE:]]

We have 3 new root CA certs ready to get added.
See the list this bug blocks.
I will do a single patch for all three certs.

About one month ago I did a "tryserver" build with 4 new roots added.
The 3 CAs from the referenced bugs have reported success, therefore we are able to add them.

There was one CA which has not yet provided any test feedback (see bug 478573), therefore I have removed their certificate from the patch I had used in the tryserver build.

Comment 1

[Kai Engert [:KaiE:]]

bug 477147
60:D6:89:74:B5:C2:65:9E:8A:0F:C1:88:7C:88:D2:46:69:1B:18:2C
addbuiltin -n "IGC/A" -t C,C,C < ~/moz/nss/head/roots0903/igca.der >> certdata.txt

bug 477134
FE:B8:C4:32:DC:F9:76:9A:CE:AE:3D:D8:90:8F:FD:28:86:65:64:7D
addbuiltin -n "Security Communication EV RootCA1" -t C,, < ~/moz/nss/head/roots0903/secom.der >> certdata.txt

bug 467138
59:22:A1:E1:5A:EA:16:35:21:F8:98:39:6A:46:46:B0:44:1B:0F:A9
addbuiltin -n "OISTE WISeKey Global Root GA CA" -t C,C, < ~/moz/nss/head/roots0903/wisekey.der >> certdata.txt

Comment 2

[Kai Engert [:KaiE:]]

Attachment: Patch v2

Comment 3

[Robert Relyea]

Comment on attachment 371979 [details] [diff] [review]
Patch v2

r+

Added CA's appear to match the flags requested and approved by mozilla policy

Comment 4

[Kai Engert [:KaiE:]]

fixed

Checking in certdata.c;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/certdata.c,v  <--  certdata.c
new revision: 1.53; previous revision: 1.52
done
Checking in certdata.txt;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/certdata.txt,v  <--  certdata.txt
new revision: 1.52; previous revision: 1.51
done
Checking in nssckbi.h;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/nssckbi.h,v  <--  nssckbi.h
new revision: 1.19; previous revision: 1.18
done