642129 - March 2011 batch of NSS root changes

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Kai Engert (:KaiE:)]

We'll deal with the set of multiple pending root additions to NSS in this single bug.

Comment 1

[Kai Engert (:KaiE:)]

Attachment: Patch v1

I'm not yet asking for review, will do a test build first.

Adding 8 roots, see 3 bugs in the dependency list.
I used the following commands:

addbuiltin -n "Go Daddy Root Certificate Authority - G2" -t C,,C < godaddy-632461.der >> ../mozilla/security/nss/lib/ckfw/builtins/certdata.txt
addbuiltin -n "Starfield Root Certificate Authority - G2" -t C,,C < starfield-632461.der >> ../mozilla/security/nss/lib/ckfw/builtins/certdata.txt
addbuiltin -n "Starfield Services Root Certificate Authority - G2" -t C,,C < starfield-serv-632461.der >> ../mozilla/security/nss/lib/ckfw/builtins/certdata.txt
addbuiltin -n "AffirmTrust Commercial" -t C,, < affirm-comm-633546.der >> ../mozilla/security/nss/lib/ckfw/builtins/certdata.txt
addbuiltin -n "AffirmTrust Networking" -t C,, < affirm-net-633546.der >> ../mozilla/security/nss/lib/ckfw/builtins/certdata.txt
addbuiltin -n "AffirmTrust Premium" -t C,, < affirm-prem-633546.der >> ../mozilla/security/nss/lib/ckfw/builtins/certdata.txt
addbuiltin -n "AffirmTrust Premium ECC" -t C,, < affirm-ecc-633546.der >> ../mozilla/security/nss/lib/ckfw/builtins/certdata.txt
addbuiltin -n "Certum Trusted Network CA" -t C,C,C < certum-635385.der >> ../mozilla/security/nss/lib/ckfw/builtins/certdata.txt

Comment 2

[Kai Engert (:KaiE:)]

Comment on attachment 519675 [details] [diff] [review]
Patch v1

We have correctness confirmation from all CAs, so I'm requesting review.

Comment 3

[Robert Relyea]

Kqi, where's the pointer to the orginal ca approval requests?

bob

Comment 4

[Kai Engert (:KaiE:)]

Bob, look at the bugs in the dependency list of this bug.

Comment 5

[Robert Relyea]

Comment on attachment 519675 [details] [diff] [review]
Patch v1

r+ rrelyea

Comment 6

[Kai Engert (:KaiE:)]

NSS trunk


cvs commit: Examining .
Checking in certdata.c;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/certdata.c,v  <--  certdata.c
new revision: 1.75; previous revision: 1.74
done
Checking in certdata.txt;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/certdata.txt,v  <--  certdata.txt
new revision: 1.72; previous revision: 1.71
done
Checking in nssckbi.h;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/nssckbi.h,v  <--  nssckbi.h
new revision: 1.28; previous revision: 1.27
done

Comment 7

[Kai Engert (:KaiE:)]

3.12 branch:

cvs commit: Examining .
Checking in certdata.c;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/certdata.c,v  <--  certdata.c
new revision: 1.67.2.8; previous revision: 1.67.2.7
done
Checking in certdata.txt;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/certdata.txt,v  <--  certdata.txt
new revision: 1.64.2.8; previous revision: 1.64.2.7
done
Checking in nssckbi.h;
/cvsroot/mozilla/security/nss/lib/ckfw/builtins/nssckbi.h,v  <--  nssckbi.h
new revision: 1.24.2.4; previous revision: 1.24.2.3
done