582579 - Enable multiple new roots from NSS 3.12.8 for EV.

Status: RESOLVED FIXED

(Core :: Security: PSM, defect)

Description

[Kai Engert [:KaiE:]]

Enable multiple new roots from NSS 3.12.8 for EV.

See blocker list.

Comment 1

[Kai Engert [:KaiE:]]

Attachment: Patch v1

Enabling the roots from the bugs listed in the dependency list.

Not yet requesting code review, pending test results from CAs.

Comment 2

[Kai Engert [:KaiE:]]

Comment on attachment 462617 [details] [diff] [review]
Patch v1

(In reply to comment #1)
> Created attachment 462617 [details] [diff] [review]
> Patch v1
> 
> Enabling the roots from the bugs listed in the dependency list.
> 
> Not yet requesting code review, pending test results from CAs.

sorry, wrong bug... please ignore comment 1

Comment 3

[Kai Engert [:KaiE:]]

Attachment: Patch v2

Enabling the roots for EV which are listed in the bugs seens in the dependency list.

Not yet requesting review, pending positive test results (OK OCSP servers) and pending feedback from CAs.

Comment 4

[Kai Engert [:KaiE:]]

Removing Izpene from dependency list, will not get included with this batch.

Comment 5

[Kai Engert [:KaiE:]]

Attachment: Patch v3

Bob or Honza, could you please review?

Comment 6

[Kai Engert [:KaiE:]]

Comment on attachment 463706 [details] [diff] [review]
Patch v3

I'm withdrawing and postponing the review request until bug 586414 gets resolved.

Comment 7

[Kai Engert [:KaiE:]]

Comment on attachment 463706 [details] [diff] [review]
Patch v3

Bug 586414 has been closed, so I'm re-requesting review for this patch.

Comment 8

[Robert Relyea]

Comment on attachment 463706 [details] [diff] [review]
Patch v3

r+

Comment 9

[Kai Engert [:KaiE:]]

Comment on attachment 463706 [details] [diff] [review]
Patch v3

Request to enable one new root for EV, which has been added to mozilla-2, FF 4, with the recent 3.12.8

Comment 10

[Johnathan Nightingale [:johnath]]

An EV enablement like this wouldn't block release, but I'll a+ the patch momentarily for landing after the tree reopens post-b7

Comment 11

[Kai Engert [:KaiE:]]

Finally landed, marking fixed.
http://hg.mozilla.org/mozilla-central/rev/4e66b4cb5e3a

Comment 12

[Kai Engert [:KaiE:]]

Comment on attachment 463706 [details] [diff] [review]
Patch v3

Branches 1.9.1 and 1.9.2 both use NSS 3.12.8, too,
so this should land on those stable branches.

Requesting approval for 1.9.1.16 and 1.9.2.13.

If it's too late, please push request to the following release, thanks.

Comment 13

[LegNeato]

Comment on attachment 463706 [details] [diff] [review]
Patch v3

a=LegNeato for 1.9.2.14 and 1.9.1.17

Comment 14

[Kai Engert [:KaiE:]]

thanks for the approval.

It's a trivial patch with no risk.
If someone would like to land it, please go ahead, I'd appreciate your help!

Comment 15

[Kai Engert [:KaiE:]]

http://hg.mozilla.org/releases/mozilla-1.9.2/rev/bdbe2b0b785f
http://hg.mozilla.org/releases/mozilla-1.9.1/rev/621d6c87d93f

Comment 16

[Al Billings [:abillings - ex-MoCo]]

Verified for 1.9.1 and 1.9.2 by looking at source.