495754 - Add new root certificates included in NSS to Thunderbird 2 (Mozilla 1.8.1 branch)

Status: RESOLVED WONTFIX

(Core :: Security: PSM, defect)

Description

[Rolf Lindemann]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10 (.NET CLR 3.5.30729)
Build Identifier: Thunderbird 2.0.x

The NSS module has recently been updated to include several additional 
root certificates (see https://bugzilla.mozilla.org/show_bug.cgi?id=493660).
Several of these root certificates are also relevant for signed email 
(S/Mime).

Reproducible: Always

Comment 1

[Mark Banner (:standard8)]

Moving to core/security: psm so that the NSS folks will know about this.

Comment 2

[Thorsten Becker]

Is this a duplicate of bug 495033?

Comment 3

[Mark Banner (:standard8)]

(In reply to comment #2)
> Is this a duplicate of bug 495033?

No, that bug is asking for updates in Firefox 3 which is served off the 1.9.0 branch. This bug is asking for updates in Thunderbird 2 which is served off the 1.8.1 branch.

Comment 4

[Wolfgang Pietrus]

Any news about this topic?

Will it be solved with 2.0.0.23?

Regards

Wolfgang Pietrus

Comment 5

[Robert Kaiser]

The new roots would also be helpful for further SeaMonkey 1.1.x releases.

Comment 6

[Mark Banner (:standard8)]

I just took a look at Thunderbird 2.0.0.23. Aside from some certificates for security devices not being present, I think all the newer certificates are now present on the 1.8 branch due to the NSS upgrade. So I believe this is WFM/fixed by the bug that upgraded it.

Comment 7

[Daniel Veditz [:dveditz]]

Not going to block a Thunderbird 2 release. Might consider a patch, but people who need to use servers with new certs can always upgrade to Tbird3

Comment 8

[Kai Engert [:KaiE:]]

reassign bug owner.
mass-update-kaie-20120918

Comment 9

[Mark Banner (:standard8)]

This didn't happen, and Thunderbird 2 is now no longer supported, so this is wontfix.