Closed Bug 834004 Opened 8 years ago Closed 3 years ago

Enable EV for GeoTrust ECC root

Categories

(NSS :: CA Certificate Root Program, task)

task
Not set
normal

Tracking

(Not tracked)

RESOLVED WONTFIX

People

(Reporter: rick_andrews, Assigned: awu)

References

Details

(Whiteboard: [ca-verifying] - EV)

Attachments

(4 files, 1 obsolete file)

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0
Build ID: 20130116073211

Steps to reproduce:

I would like to update the trust bits for this root, already in Mozilla's trust list:
GeoTrust Primary Certification Authority - G2 (SHA384withECC)

Please set Websites (SSL/TLS), Code Signing and EV trust bits.
Updated to contain information about external subordinate CA customers.
Attachment #705577 - Attachment is obsolete: true
I apologize for the delay in my response. My work on root inclusion requests was postponed for a while.

I am accepting this bug, and will work on it as soon as possible, but I have a large backlog.
https://wiki.mozilla.org/CA:Schedule#Requests_in_the_Information_Gathering_and_Verification_Phase

I will update this bug when I begin the Information Verification phase.
https://wiki.mozilla.org/CA:How_to_apply#Information_Verification
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true
All three trust bits are already enabled for this root.
http://tinyurl.com/MozillaBuiltInCAs

So I think this request is for EV enablement of an ECC root.
GeoTrust Primary Certification Authority - G2 (SHA384withECC)
Summary: Update trust bits for existing GeoTrust ECC root → Enable EV for GeoTrust ECC root
Whiteboard: EV
Request is to EV-enable an already included root cert.

CA needs to complete EV testing before we can continue with this request.
https://wiki.mozilla.org/PSM:EV_Testing_Easy_Version
Whiteboard: EV → EV - Information incomplete
We don't see the green bar when we test. Here's the content of the test ev file:

1_fingerprint 8D:17:84:D5:37:F3:03:7D:EC:70:FE:57:8B:51:9A:99:E6:10:D7:B0
2_readable_oid 1.3.6.1.4.1.14370.1.6
3_issuer MIGYMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjE5MDcGA1UECxMwKGMpIDIwMDcgR2VvVHJ1c3QgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MTYwNAYDVQQDEy1HZW9UcnVzdCBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzI=
4_serial PLL0SAoA4v7rJDteYD7Daw==

Test site: https://ssltest42.ssl.symclab.com
Attached image Bug834004.PNG
Attached file test_ev_roots.txt
Worked fine. Attached is the screenshot with EV and the test_ev_roots.txt file.
Hi Kathleen, could you please let us know if you are awaiting anything else from us? Thank you.
In the attached document search for "NEED" to find the information that is still needed.

Please review the full document to make sure it is accurate and complete, and comment in this bug to provide corrections and the additional requested information.
Depends on: 1229445
Assignee: kwilson → awu
Whiteboard: EV - Information incomplete → [ca-verification] - EV
Whiteboard: [ca-verification] - EV → [ca-verifying] - EV
Product: mozilla.org → NSS
Closing as WONTFIX, per https://wiki.mozilla.org/CA:Symantec_Issues etc.
Status: ASSIGNED → RESOLVED
Closed: 3 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.