857615 - April 2013 batch of NSS root CA changes

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Kai Engert [:KaiE:]]

The purpose of this bug is to make all changes necessary for the April 2013 batch of NSS root CA changes using a single patch.

For the work covered by this bug, see the list of list of bugs this one blocks.

Comment 1

[Kai Engert [:KaiE:]]

Attachment: patch v1

I started a test build with the attached patch at
https://tbpl.mozilla.org/?tree=Try&rev=cdb68506e138

Comment 2

[Kai Engert [:KaiE:]]

Beside manual editing, I used the following commands for adding new or replacement roots:

addbuiltin -n "TURKTRUST Certificate Services Provider Root 2007" -t C,,C < ~/moz/nss/hg/root1304/turktrust.der >> certdata.txt
addbuiltin -n "D-TRUST Root Class 3 CA 2 2009" -t C,, < ~/moz/nss/hg/root1304/dtrust.der >> certdata.txt
addbuiltin -n "D-TRUST Root Class 3 CA 2 EV 2009" -t C,, < ~/moz/nss/hg/root1304/dtrustev.der >> certdata.txt
addbuiltin -n "PSCProcert" -t C,C,C < ~/moz/nss/hg/root1304/pscpro.der >> certdata.txt
addbuiltin -n "China Internet Network Information Center EV Certificates Root" -t C,, < ~/moz/nss/hg/root1304/cnnic.der >> certdata.txt 
addbuiltin -n "Swisscom Root CA 2" -t C,C,C < ~/moz/nss/hg/root1304/swiss.der >> certdata.txt 
addbuiltin -n "Swisscom Root EV CA 2" -t C,,C < ~/moz/nss/hg/root1304/swissev.der >> certdata.txt 
addbuiltin -n "CA Disig Root R1" -t C,C,C < ~/moz/nss/hg/root1304/disig1.der >> certdata.txt 
addbuiltin -n "CA Disig Root R2" -t C,C,C < ~/moz/nss/hg/root1304/disig2.der >> certdata.txt 
addbuiltin -n "Entrust.net Premium 2048 Secure Server CA" -t C,C,C < ~/moz/nss/hg/root1304/entrust.der >> certdata.txt

Comment 3

[Kathleen Wilson]

I have tested and code reviewed the changes, and the changes are as expected.

Thanks!
Kathleen

Comment 4

[Kai Engert [:KaiE:]]

Comment on attachment 732873 [details] [diff] [review]
patch v1

Bob, you could please review the patch?
Thanks in advance.

Comment 5

[Robert Relyea]

Comment on attachment 732873 [details] [diff] [review]
patch v1

r+ rrelyea

Comment 6

[Kai Engert [:KaiE:]]

Checked in to NSS trunk.

https://hg.mozilla.org/projects/nss/rev/31f662841be2

Comment 7

[Kai Engert [:KaiE:]]

These changes are planned to be contained in NSS 3.15

Only Mozilla Firefox versions that upgrade to NSS version 3.15 will contain the changes.
That work is tracked in bug 858231.