854384 - E-Guven S2 and S3 Root inclusion to Mozilla browser

Status: RESOLVED WONTFIX

(CA Program :: CA Certificate Root Program, task)

Description

[Alpaslan]

E-Guven issued 2 self signed root certs "E-GUVEN Kok Elektronik Sertifika Hizmet Saglayicisi S2" and  "E-GUVEN Kok Elektronik Sertifika Hizmet Saglayicisi S3" on 11 March 2013. We request these root certs to be included in Mozilla browser.

Comment 1

[Kathleen Wilson]

I am accepting this bug, and will work on it as soon as possible, but I have a large backlog.
https://wiki.mozilla.org/CA:Schedule#Requests_in_the_Information_Gathering_and_Verification_Phase

I will update this bug when I begin the Information Verification phase.
https://wiki.mozilla.org/CA:How_to_apply#Information_Verification

In the meantime, please provide the information listed here:
https://wiki.mozilla.org/CA:Information_checklist

Comment 2

[Alpaslan]

Sorry for delay but I am still preparing requested documents including our comments & procedures. 
We need to update some of our documentation regarding updated policies.


For your information

Comment 3

[Alpaslan]

Attachment: E-Guven Root Hierarchy

EGuven Root Hieararchy  2013

Comment 4

[Alpaslan]

Attachment: ISO 27001 Audit report

ISO 27001 Audit Report for E-Guven

Comment 5

[Alpaslan]

Attachment: ETSI 101-456 compliance report

ETSI 101-456 compliance report from - Information and Communication Technologies Authority   ( Turkish Governmental Organization ref: http://www.btk.gov.tr/bilgi_teknolojileri/elektronik_imza/eguven.pdf)

Comment 6

[Kathleen Wilson]

The status of this request is that we are waiting for the CA to provide the rest of the information listed here: https://wiki.mozilla.org/CA:Information_checklist
(as per Comment #1 and Comment #2)

Comment 7

[Kathleen Wilson]

Due to ongoing concerns about E-Guven's audit statements, we are removing the currently-included E-Guven root from NSS in Bugzilla Bug #1145270.

In the future, if E-Guven is able to meet all of Mozilla's requirements and the CA/Browser Forum's Baseline Requirements, and provide corresponding annual audit statements, then E-Guven may re-apply for inclusion of their root certificates by opening a new Bugzilla Bug.