-
Notifications
You must be signed in to change notification settings - Fork 47
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
process upstream February root updates #60
Conversation
https://bugzilla.mozilla.org/show_bug.cgi?id=1870673 mentions two additions:
The D-Trust additions are for SMIME trust bit roots and so wouldn't be relevant here. The Telekom additions include some TLS roots that I would expect to show up in the CCADB report since they've already been included into NSS, however the CCADB CSV we process doesn't include any rows for these new roots. Not sure what to make of that. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Version bump? Should we backport this given that there's still quite a bit of old rustls in the wild? File a Mozilla issue about the lack of new roots in the CCADB report?
|
I'm going to guess there are a couple of batch processing pipelines between the mozilla sources and CCADB; maybe they'll appear after one or two 24 hour periods? |
Well, if Mozilla batches up the changes it seems weird that they end up in the CCADB in multiple batches, right? |
ca58f19
to
d5ce3c9
Compare
See https://bugzilla.mozilla.org/show_bug.cgi?id=1870673 Removals: 1. SECOM Trust.net - Security Communication RootCA1 This expired root CA was removed upstream. See https://bugzilla.mozilla.org/show_bug.cgi?id=1865450 Additions: 1. Telekom Security TLS ECC Root 2020 See https://bugzilla.mozilla.org/show_bug.cgi?id=1820592 2. Telekom Security SMIME RSA Root 2023 See https://bugzilla.mozilla.org/show_bug.cgi?id=1820592
d5ce3c9
to
47f4840
Compare
branch name is stale now that the additions are here, but it isn't possible to fix that without creating a new PR. The PR description and commit messages have been updated.
Version bump added.
Yeah I think that's worthwhile. I can do that tomorrow. |
See https://bugzilla.mozilla.org/show_bug.cgi?id=1870673
Removals:
SECOM Trust.net - Security Communication RootCA1
This expired root CA was removed upstream.
See https://bugzilla.mozilla.org/show_bug.cgi?id=1865450
Additions:
Telekom Security TLS ECC Root 2020
See https://bugzilla.mozilla.org/show_bug.cgi?id=1820592
Telekom Security TLS RSA Root 2023
See https://bugzilla.mozilla.org/show_bug.cgi?id=1820592