833998 - Enable EV for Thawte ECC root

Status: RESOLVED WONTFIX

(CA Program :: CA Certificate Root Program, task)

Description

[Rick Andrews]

Attachment: CAInformationTemplate_ThawteExisting.docx

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0
Build ID: 20130116073211

Steps to reproduce:

I would like to add the EV bit to this root that is already in Mozilla's trust list:
thawte Primary Root CA - G2 (SHA384withECC)

This root should also have Websites (SSL/TLS) and Code Signing set.

Comment 1

[Kathleen Wilson]

I apologize for the delay in my response. My work on root inclusion requests was postponed for a while.

I am accepting this bug, and will work on it as soon as possible, but I have a large backlog.
https://wiki.mozilla.org/CA:Schedule#Requests_in_the_Information_Gathering_and_Verification_Phase

I will update this bug when I begin the Information Verification phase.
https://wiki.mozilla.org/CA:How_to_apply#Information_Verification

Comment 2

[Kathleen Wilson]

The websites and code signing trust bits are already enabled for this root.
http://tinyurl.com/MozillaBuiltInCAs

So I think this request is for EV enablement of an ECC root.
thawte Primary Root CA - G2 (SHA384withECC)

Comment 3

[Kathleen Wilson]

Request is to EV-enable an already included root cert.

CA needs to complete EV testing before we can continue with this request.
https://wiki.mozilla.org/PSM:EV_Testing_Easy_Version

Comment 4

[Rick Andrews]

Completed testing, but no green bar. Here's the contents of the ev test file:

1_fingerprint AA:DB:BC:22:23:8F:C4:01:A1:27:BB:38:DD:F4:1D:DB:08:9E:F0:12
2_readable_oid 2.16.840.1.113733.1.7.48.1 3_issuer MIGEMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMTgwNgYDVQQLEy8oYykgMjAwNyB0aGF3dGUsIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTEkMCIGA1UEAxMbdGhhd3RlIFByaW1hcnkgUm9vdCBDQSAtIEcy
4_serial NfwmXNmET8k9Jj1Xm67XVg==

Site Tested for https://ssltest40.ssl.symclab.com

Comment 5

[Dhara]

Attachment: test_ev_roots.txt

Comment 6

[Dhara]

Attachment: Bug833998.PNG

Comment 7

[Dhara]

Attached the test_ev_root file and Green bar screenshot from QA testing.

Comment 8

[suhasini_anand]

Hi Kathleen, are you waiting for anything else from us on this ticket?

Comment 9

[Kathleen Wilson]

Attachment: 833998-CAInformation.pdf

In the attached document search for "NEED" to find the information that is still needed.

Please review the full document to make sure it is accurate and complete, and comment in this bug to provide corrections and the additional requested information.

Comment 10

[Kathleen Wilson]

Closing as WONTFIX, per https://wiki.mozilla.org/CA:Symantec_Issues etc.