security/certverifier/ExtendedValidation.cpp
author Kevin Jacobs <kjacobs@mozilla.com>
Thu, 25 Apr 2019 17:46:16 +0000 (2019-04-25)
changeset 471349 80374044414da9f5b3634c91345d07612754fcda
parent 470697 4ec3f8bab9f32fbcbe04dfda2aa32f8a59389d37
child 498031 1d2541f1da234fd19d0e65e53fa90e57a8aac462
permissions -rw-r--r--
Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler Differential Revision: https://phabricator.services.mozilla.com/D28583
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
     1
/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*-
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
     2
 *
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
     3
 * This Source Code Form is subject to the terms of the Mozilla Public
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
     4
 * License, v. 2.0. If a copy of the MPL was not distributed with this
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
     5
 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
     6
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
     7
#include "ExtendedValidation.h"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
     8
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
     9
#include "cert.h"
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
    10
#include "hasht.h"
313437
1fcda39e5626b8e35d7218303fd66f7c7d4d68ab Bug 1296180 - Replace more uses of PR_ARRAY_SIZE with mozilla::ArrayLength. r=keeler,mt
Igor <palmieri.igor@gmail.com>
parents: 313386
diff changeset
    11
#include "mozilla/ArrayUtils.h"
319180
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
    12
#include "mozilla/Assertions.h"
348263
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
    13
#include "mozilla/Base64.h"
316863
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
    14
#include "mozilla/Casting.h"
316027
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
    15
#include "mozilla/PodOperations.h"
348263
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
    16
#include "nsDependentString.h"
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
    17
#include "nsString.h"
313437
1fcda39e5626b8e35d7218303fd66f7c7d4d68ab Bug 1296180 - Replace more uses of PR_ARRAY_SIZE with mozilla::ArrayLength. r=keeler,mt
Igor <palmieri.igor@gmail.com>
parents: 313386
diff changeset
    18
#include "pk11pub.h"
439251
432a98e50d2bfab224328254266069aef1a474cc Bug 1479787 - use NSS mozpkix in Firefox, r=mt,keeler,glandium
Franziskus Kiefer <franziskuskiefer@gmail.com>
parents: 434138
diff changeset
    19
#include "mozpkix/pkixtypes.h"
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    20
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
    21
namespace mozilla {
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
    22
namespace psm {
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
    23
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
    24
struct EVInfo {
342478
c0c5a47e6516e9d56324d4bc16b2db31dc882c7e Bug 1335294: Remove const from data tables under security/ for better codegen on Windows. r=keeler
David Major <dmajor@mozilla.com>
parents: 340782
diff changeset
    25
  // See bug 1338873 about making these fields const.
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
    26
  const char* dottedOid;
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
    27
  const char*
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
    28
      oidName;  // Set this to null to signal an invalid structure,
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
    29
                // (We can't have an empty list, so we'll use a dummy entry)
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
    30
  unsigned char sha256Fingerprint[SHA256_LENGTH];
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
    31
  const char* issuerBase64;
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
    32
  const char* serialBase64;
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    33
};
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    34
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    35
// HOWTO enable additional CA root certificates for EV:
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    36
//
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    37
// For each combination of "root certificate" and "policy OID",
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
    38
// one entry must be added to the array named kEVInfos.
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    39
//
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    40
// We use the combination of "issuer name" and "serial number" to
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    41
// uniquely identify the certificate. In order to avoid problems
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    42
// because of encodings when comparing certificates, we don't
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    43
// use plain text representation, we rather use the original encoding
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    44
// as it can be found in the root certificate (in base64 format).
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    45
//
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    46
// We can use the NSS utility named "pp" to extract the encoding.
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    47
//
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    48
// Build standalone NSS including the NSS tools, then run
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    49
//   pp -t certificate-identity -i the-cert-filename
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    50
//
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
    51
// You will need the output from sections "Issuer", "Fingerprint (SHA-256)",
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    52
// "Issuer DER Base64" and "Serial DER Base64".
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    53
//
343456
efe205d42f032af5e95b0f6372a7f3d44fc6117e Bug 1335632 - Split out the const and mutable parts of myTrustedEVInfos. r=keeler
David Major <dmajor@mozilla.com>
parents: 342478
diff changeset
    54
// The new section consists of the following components:
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    55
//
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    56
// - a comment that should contain the human readable issuer name
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    57
//   of the certificate, as printed by the pp tool
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    58
// - the EV policy OID that is associated to the EV grant
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    59
// - a text description of the EV policy OID. The array can contain
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    60
//   multiple entries with the same OID.
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    61
//   Please make sure to use the identical OID text description for
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    62
//   all entries with the same policy OID (use the text search
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    63
//   feature of your text editor to find duplicates).
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    64
//   When adding a new policy OID that is not yet contained in the array,
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    65
//   please make sure that your new description is different from
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    66
//   all the other descriptions (again use the text search feature
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    67
//   to be sure).
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
    68
// - the SHA-256 fingerprint
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    69
// - the "Issuer DER Base64" as printed by the pp tool.
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    70
//   Remove all whitespaces. If you use multiple lines, make sure that
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    71
//   only the final line will be followed by a comma.
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    72
// - the "Serial DER Base64" (as printed by pp)
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    73
//
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    74
// After adding an entry, test it locally against the test site that
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    75
// has been provided by the CA. Note that you must use a version of NSS
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    76
// where the root certificate has already been added and marked as trusted
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
    77
// for issuing SSL server certificates (at least).
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    78
//
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    79
// If you are able to connect to the site without certificate errors,
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    80
// but you don't see the EV status indicator, then most likely the CA
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    81
// has a problem in their infrastructure. The most common problems are
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    82
// related to the CA's OCSP infrastructure, either they use an incorrect
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    83
// OCSP signing certificate, or OCSP for the intermediate certificates
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    84
// isn't working, or OCSP isn't working at all.
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    85
214305
4e565c7ef9f303886d80117cc6f0b735c844557a Bug 1092710 - Fix -Wunused-const-variable warning-as-error in non-unified security/certverifier. r=keeler
Chris Peterson <cpeterson@mozilla.com>
parents: 211184
diff changeset
    86
#ifdef DEBUG
211184
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 211020
diff changeset
    87
static const size_t NUM_TEST_EV_ROOTS = 2;
214305
4e565c7ef9f303886d80117cc6f0b735c844557a Bug 1092710 - Fix -Wunused-const-variable warning-as-error in non-unified security/certverifier. r=keeler
Chris Peterson <cpeterson@mozilla.com>
parents: 211184
diff changeset
    88
#endif
4e565c7ef9f303886d80117cc6f0b735c844557a Bug 1092710 - Fix -Wunused-const-variable warning-as-error in non-unified security/certverifier. r=keeler
Chris Peterson <cpeterson@mozilla.com>
parents: 211184
diff changeset
    89
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
    90
static const struct EVInfo kEVInfos[] = {
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
    91
// clang-format off
255265
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
    92
  // IMPORTANT! When extending this list, if you add another entry that uses
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
    93
  // the same dottedOid as an existing entry, use the same oidName.
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    94
#ifdef DEBUG
255265
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
    95
  // Debug EV certificates should all use the following OID:
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
    96
  // 1.3.6.1.4.1.13769.666.666.666.1.500.9.1.
255265
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
    97
  // (multiple entries with the same OID is ok)
211184
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 211020
diff changeset
    98
  // If you add or remove debug EV certs you must also modify NUM_TEST_EV_ROOTS
448705
04f0bbf40bf36957dc1f72a8aae9916df0e3222f Bug 1508472 - Part 5: Fifth batch of comment fix-ups in preparation for the tree reformat r=sylvestre
Ehsan Akhgari <ehsan@mozilla.com>
parents: 440762
diff changeset
    99
  // so that the correct number of certs are skipped as these debug EV certs
04f0bbf40bf36957dc1f72a8aae9916df0e3222f Bug 1508472 - Part 5: Fifth batch of comment fix-ups in preparation for the tree reformat r=sylvestre
Ehsan Akhgari <ehsan@mozilla.com>
parents: 440762
diff changeset
   100
  // are NOT part of the default trust store.
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   101
  {
255265
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   102
    // This is the PSM xpcshell testing EV certificate. It can be generated
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   103
    // using pycert.py and the following specification:
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   104
    //
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   105
    // issuer:evroot
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   106
    // subject:evroot
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   107
    // subjectKey:ev
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   108
    // issuerKey:ev
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   109
    // validity:20150101-20350101
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   110
    // extension:basicConstraints:cA,
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   111
    // extension:keyUsage:keyCertSign,cRLSign
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   112
    //
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   113
    // If this ever needs to change, re-generate the certificate and update the
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   114
    // following entry with the new fingerprint, issuer, and serial number.
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   115
    "1.3.6.1.4.1.13769.666.666.666.1.500.9.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   116
    "DEBUGtesting EV OID",
392333
e972f1bffe6982813442ad3cb6d59571fa85000f bug 1413336 - (7/7) regenerate all the certificates! r=Cykesiopka
David Keeler <dkeeler@mozilla.com>
parents: 390600
diff changeset
   117
    { 0x70, 0xED, 0xCB, 0x5A, 0xCE, 0x02, 0xC7, 0xC5, 0x0B, 0xA3, 0xD2, 0xD7,
e972f1bffe6982813442ad3cb6d59571fa85000f bug 1413336 - (7/7) regenerate all the certificates! r=Cykesiopka
David Keeler <dkeeler@mozilla.com>
parents: 390600
diff changeset
   118
      0xC6, 0xF5, 0x0E, 0x18, 0x02, 0x19, 0x17, 0xF5, 0x48, 0x08, 0x9C, 0xB3,
e972f1bffe6982813442ad3cb6d59571fa85000f bug 1413336 - (7/7) regenerate all the certificates! r=Cykesiopka
David Keeler <dkeeler@mozilla.com>
parents: 390600
diff changeset
   119
      0x8E, 0xEF, 0x9A, 0x1A, 0x4D, 0x7F, 0x82, 0x94 },
255265
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   120
    "MBExDzANBgNVBAMMBmV2cm9vdA==",
392333
e972f1bffe6982813442ad3cb6d59571fa85000f bug 1413336 - (7/7) regenerate all the certificates! r=Cykesiopka
David Keeler <dkeeler@mozilla.com>
parents: 390600
diff changeset
   121
    "IZSHsVgzcvhPgdfrgdMGlpSfMeg=",
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   122
  },
211184
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 211020
diff changeset
   123
  {
255265
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   124
    // This is an RSA root with an inadequate key size. It is used to test that
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   125
    // minimum key sizes are enforced when verifying for EV. It can be
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   126
    // generated using pycert.py and the following specification:
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   127
    //
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   128
    // issuer:ev_root_rsa_2040
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   129
    // subject:ev_root_rsa_2040
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   130
    // issuerKey:evRSA2040
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   131
    // subjectKey:evRSA2040
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   132
    // validity:20150101-20350101
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   133
    // extension:basicConstraints:cA,
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   134
    // extension:keyUsage:cRLSign,keyCertSign
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   135
    //
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   136
    // If this ever needs to change, re-generate the certificate and update the
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   137
    // following entry with the new fingerprint, issuer, and serial number.
211184
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 211020
diff changeset
   138
    "1.3.6.1.4.1.13769.666.666.666.1.500.9.1",
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 211020
diff changeset
   139
    "DEBUGtesting EV OID",
392333
e972f1bffe6982813442ad3cb6d59571fa85000f bug 1413336 - (7/7) regenerate all the certificates! r=Cykesiopka
David Keeler <dkeeler@mozilla.com>
parents: 390600
diff changeset
   140
    { 0x40, 0xAB, 0x5D, 0xA5, 0x89, 0x15, 0xA9, 0x4B, 0x82, 0x87, 0xB8, 0xA6,
e972f1bffe6982813442ad3cb6d59571fa85000f bug 1413336 - (7/7) regenerate all the certificates! r=Cykesiopka
David Keeler <dkeeler@mozilla.com>
parents: 390600
diff changeset
   141
      0x9A, 0x84, 0xB1, 0xDB, 0x7A, 0x9D, 0xDB, 0xB8, 0x4E, 0xE1, 0x23, 0xE3,
e972f1bffe6982813442ad3cb6d59571fa85000f bug 1413336 - (7/7) regenerate all the certificates! r=Cykesiopka
David Keeler <dkeeler@mozilla.com>
parents: 390600
diff changeset
   142
      0xC6, 0x64, 0xE7, 0x50, 0xDC, 0x35, 0x8C, 0x68  },
255265
6365880a9f9fe299f74ad81a8d79e597f74f1fa0 bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 250685
diff changeset
   143
    "MBsxGTAXBgNVBAMMEGV2X3Jvb3RfcnNhXzIwNDA=",
392333
e972f1bffe6982813442ad3cb6d59571fa85000f bug 1413336 - (7/7) regenerate all the certificates! r=Cykesiopka
David Keeler <dkeeler@mozilla.com>
parents: 390600
diff changeset
   144
    "J7nCMgtzNcSPG7jAh3CWzlTGHQg=",
211184
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 211020
diff changeset
   145
  },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   146
#endif
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   147
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   148
    // CN=Cybertrust Global Root,O=Cybertrust, Inc
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   149
    "1.3.6.1.4.1.6334.1.100.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   150
    "Cybertrust EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   151
    { 0x96, 0x0A, 0xDF, 0x00, 0x63, 0xE9, 0x63, 0x56, 0x75, 0x0C, 0x29,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   152
      0x65, 0xDD, 0x0A, 0x08, 0x67, 0xDA, 0x0B, 0x9C, 0xBD, 0x6E, 0x77,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   153
      0x71, 0x4A, 0xEA, 0xFB, 0x23, 0x49, 0xAB, 0x39, 0x3D, 0xA3 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   154
    "MDsxGDAWBgNVBAoTD0N5YmVydHJ1c3QsIEluYzEfMB0GA1UEAxMWQ3liZXJ0cnVz"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   155
    "dCBHbG9iYWwgUm9vdA==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   156
    "BAAAAAABD4WqLUg=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   157
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   158
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   159
    // CN=SwissSign Gold CA - G2,O=SwissSign AG,C=CH
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   160
    "2.16.756.1.89.1.2.1.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   161
    "SwissSign EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   162
    { 0x62, 0xDD, 0x0B, 0xE9, 0xB9, 0xF5, 0x0A, 0x16, 0x3E, 0xA0, 0xF8,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   163
      0xE7, 0x5C, 0x05, 0x3B, 0x1E, 0xCA, 0x57, 0xEA, 0x55, 0xC8, 0x68,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   164
      0x8F, 0x64, 0x7C, 0x68, 0x81, 0xF2, 0xC8, 0x35, 0x7B, 0x95 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   165
    "MEUxCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxHzAdBgNVBAMT"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   166
    "FlN3aXNzU2lnbiBHb2xkIENBIC0gRzI=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   167
    "ALtAHEP1Xk+w",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   168
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   169
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   170
    // CN=XRamp Global Certification Authority,O=XRamp Security Services Inc,OU=www.xrampsecurity.com,C=US
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   171
    "2.16.840.1.114404.1.1.2.4.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   172
    "Trustwave EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   173
    { 0xCE, 0xCD, 0xDC, 0x90, 0x50, 0x99, 0xD8, 0xDA, 0xDF, 0xC5, 0xB1,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   174
      0xD2, 0x09, 0xB7, 0x37, 0xCB, 0xE2, 0xC1, 0x8C, 0xFB, 0x2C, 0x10,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   175
      0xC0, 0xFF, 0x0B, 0xCF, 0x0D, 0x32, 0x86, 0xFC, 0x1A, 0xA2 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   176
    "MIGCMQswCQYDVQQGEwJVUzEeMBwGA1UECxMVd3d3LnhyYW1wc2VjdXJpdHkuY29t"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   177
    "MSQwIgYDVQQKExtYUmFtcCBTZWN1cml0eSBTZXJ2aWNlcyBJbmMxLTArBgNVBAMT"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   178
    "JFhSYW1wIEdsb2JhbCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   179
    "UJRs7Bjq1ZxN1ZfvdY+grQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   180
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   181
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   182
    // CN=SecureTrust CA,O=SecureTrust Corporation,C=US
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   183
    "2.16.840.1.114404.1.1.2.4.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   184
    "Trustwave EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   185
    { 0xF1, 0xC1, 0xB5, 0x0A, 0xE5, 0xA2, 0x0D, 0xD8, 0x03, 0x0E, 0xC9,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   186
      0xF6, 0xBC, 0x24, 0x82, 0x3D, 0xD3, 0x67, 0xB5, 0x25, 0x57, 0x59,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   187
      0xB4, 0xE7, 0x1B, 0x61, 0xFC, 0xE9, 0xF7, 0x37, 0x5D, 0x73 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   188
    "MEgxCzAJBgNVBAYTAlVTMSAwHgYDVQQKExdTZWN1cmVUcnVzdCBDb3Jwb3JhdGlv"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   189
    "bjEXMBUGA1UEAxMOU2VjdXJlVHJ1c3QgQ0E=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   190
    "DPCOXAgWpa1Cf/DrJxhZ0A==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   191
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   192
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   193
    // CN=Secure Global CA,O=SecureTrust Corporation,C=US
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   194
    "2.16.840.1.114404.1.1.2.4.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   195
    "Trustwave EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   196
    { 0x42, 0x00, 0xF5, 0x04, 0x3A, 0xC8, 0x59, 0x0E, 0xBB, 0x52, 0x7D,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   197
      0x20, 0x9E, 0xD1, 0x50, 0x30, 0x29, 0xFB, 0xCB, 0xD4, 0x1C, 0xA1,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   198
      0xB5, 0x06, 0xEC, 0x27, 0xF1, 0x5A, 0xDE, 0x7D, 0xAC, 0x69 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   199
    "MEoxCzAJBgNVBAYTAlVTMSAwHgYDVQQKExdTZWN1cmVUcnVzdCBDb3Jwb3JhdGlv"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   200
    "bjEZMBcGA1UEAxMQU2VjdXJlIEdsb2JhbCBDQQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   201
    "B1YipOjUiolN9BPI8PjqpQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   202
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   203
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   204
    // CN=COMODO ECC Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   205
    "1.3.6.1.4.1.6449.1.2.1.5.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   206
    "Comodo EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   207
    { 0x17, 0x93, 0x92, 0x7A, 0x06, 0x14, 0x54, 0x97, 0x89, 0xAD, 0xCE,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   208
      0x2F, 0x8F, 0x34, 0xF7, 0xF0, 0xB6, 0x6D, 0x0F, 0x3A, 0xE3, 0xA3,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   209
      0xB8, 0x4D, 0x21, 0xEC, 0x15, 0xDB, 0xBA, 0x4F, 0xAD, 0xC7 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   210
    "MIGFMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAw"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   211
    "DgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDErMCkG"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   212
    "A1UEAxMiQ09NT0RPIEVDQyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   213
    "H0evqmIAcFBUTAGem2OZKg==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   214
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   215
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   216
    // CN=COMODO Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   217
    "1.3.6.1.4.1.6449.1.2.1.5.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   218
    "Comodo EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   219
    { 0x0C, 0x2C, 0xD6, 0x3D, 0xF7, 0x80, 0x6F, 0xA3, 0x99, 0xED, 0xE8,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   220
      0x09, 0x11, 0x6B, 0x57, 0x5B, 0xF8, 0x79, 0x89, 0xF0, 0x65, 0x18,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   221
      0xF9, 0x80, 0x8C, 0x86, 0x05, 0x03, 0x17, 0x8B, 0xAF, 0x66 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   222
    "MIGBMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAw"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   223
    "DgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDEnMCUG"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   224
    "A1UEAxMeQ09NT0RPIENlcnRpZmljYXRpb24gQXV0aG9yaXR5",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   225
    "ToEtioJl4AsC7j41AkblPQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   226
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   227
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   228
    // CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   229
    "1.3.6.1.4.1.6449.1.2.1.5.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   230
    "Comodo EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   231
    { 0x68, 0x7F, 0xA4, 0x51, 0x38, 0x22, 0x78, 0xFF, 0xF0, 0xC8, 0xB1,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   232
      0x1F, 0x8D, 0x43, 0xD5, 0x76, 0x67, 0x1C, 0x6E, 0xB2, 0xBC, 0xEA,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   233
      0xB4, 0x13, 0xFB, 0x83, 0xD9, 0x65, 0xD0, 0x6D, 0x2F, 0xF2 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   234
    "MG8xCzAJBgNVBAYTAlNFMRQwEgYDVQQKEwtBZGRUcnVzdCBBQjEmMCQGA1UECxMd"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   235
    "QWRkVHJ1c3QgRXh0ZXJuYWwgVFRQIE5ldHdvcmsxIjAgBgNVBAMTGUFkZFRydXN0"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   236
    "IEV4dGVybmFsIENBIFJvb3Q=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   237
    "AQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   238
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   239
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   240
    // OU=Go Daddy Class 2 Certification Authority,O=\"The Go Daddy Group, Inc.\",C=US
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   241
    "2.16.840.1.114413.1.7.23.3",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   242
    "Go Daddy EV OID a",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   243
    { 0xC3, 0x84, 0x6B, 0xF2, 0x4B, 0x9E, 0x93, 0xCA, 0x64, 0x27, 0x4C,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   244
      0x0E, 0xC6, 0x7C, 0x1E, 0xCC, 0x5E, 0x02, 0x4F, 0xFC, 0xAC, 0xD2,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   245
      0xD7, 0x40, 0x19, 0x35, 0x0E, 0x81, 0xFE, 0x54, 0x6A, 0xE4 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   246
    "MGMxCzAJBgNVBAYTAlVTMSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIElu"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   247
    "Yy4xMTAvBgNVBAsTKEdvIERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRo"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   248
    "b3JpdHk=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   249
    "AA==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   250
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   251
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   252
    // CN=Go Daddy Root Certificate Authority - G2,O="GoDaddy.com, Inc.",L=Scottsdale,ST=Arizona,C=US
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   253
    "2.16.840.1.114413.1.7.23.3",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   254
    "Go Daddy EV OID a",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   255
    { 0x45, 0x14, 0x0B, 0x32, 0x47, 0xEB, 0x9C, 0xC8, 0xC5, 0xB4, 0xF0,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   256
      0xD7, 0xB5, 0x30, 0x91, 0xF7, 0x32, 0x92, 0x08, 0x9E, 0x6E, 0x5A,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   257
      0x63, 0xE2, 0x74, 0x9D, 0xD3, 0xAC, 0xA9, 0x19, 0x8E, 0xDA },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   258
    "MIGDMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2Nv"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   259
    "dHRzZGFsZTEaMBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xMTAvBgNVBAMTKEdv"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   260
    "IERhZGR5IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzI=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   261
    "AA==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   262
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   263
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   264
    // OU=Starfield Class 2 Certification Authority,O=\"Starfield Technologies, Inc.\",C=US
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   265
    "2.16.840.1.114414.1.7.23.3",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   266
    "Go Daddy EV OID b",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   267
    { 0x14, 0x65, 0xFA, 0x20, 0x53, 0x97, 0xB8, 0x76, 0xFA, 0xA6, 0xF0,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   268
      0xA9, 0x95, 0x8E, 0x55, 0x90, 0xE4, 0x0F, 0xCC, 0x7F, 0xAA, 0x4F,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   269
      0xB7, 0xC2, 0xC8, 0x67, 0x75, 0x21, 0xFB, 0x5F, 0xB6, 0x58 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   270
    "MGgxCzAJBgNVBAYTAlVTMSUwIwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVz"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   271
    "LCBJbmMuMTIwMAYDVQQLEylTdGFyZmllbGQgQ2xhc3MgMiBDZXJ0aWZpY2F0aW9u"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   272
    "IEF1dGhvcml0eQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   273
    "AA==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   274
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   275
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   276
    // CN=Starfield Root Certificate Authority - G2,O="Starfield Technologies, Inc.",L=Scottsdale,ST=Arizona,C=US
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   277
    "2.16.840.1.114414.1.7.23.3",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   278
    "Go Daddy EV OID b",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   279
    { 0x2C, 0xE1, 0xCB, 0x0B, 0xF9, 0xD2, 0xF9, 0xE1, 0x02, 0x99, 0x3F,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   280
      0xBE, 0x21, 0x51, 0x52, 0xC3, 0xB2, 0xDD, 0x0C, 0xAB, 0xDE, 0x1C,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   281
      0x68, 0xE5, 0x31, 0x9B, 0x83, 0x91, 0x54, 0xDB, 0xB7, 0xF5 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   282
    "MIGPMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2Nv"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   283
    "dHRzZGFsZTElMCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEy"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   284
    "MDAGA1UEAxMpU3RhcmZpZWxkIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0g"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   285
    "RzI=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   286
    "AA==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   287
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   288
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   289
    // CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   290
    "2.16.840.1.114412.2.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   291
    "DigiCert EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   292
    { 0x74, 0x31, 0xE5, 0xF4, 0xC3, 0xC1, 0xCE, 0x46, 0x90, 0x77, 0x4F,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   293
      0x0B, 0x61, 0xE0, 0x54, 0x40, 0x88, 0x3B, 0xA9, 0xA0, 0x1E, 0xD0,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   294
      0x0B, 0xA6, 0xAB, 0xD7, 0x80, 0x6E, 0xD3, 0xB1, 0x18, 0xCF },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   295
    "MGwxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsT"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   296
    "EHd3dy5kaWdpY2VydC5jb20xKzApBgNVBAMTIkRpZ2lDZXJ0IEhpZ2ggQXNzdXJh"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   297
    "bmNlIEVWIFJvb3QgQ0E=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   298
    "AqxcJmoLQJuPC3nyrkYldw==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   299
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   300
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   301
    // CN=QuoVadis Root CA 2,O=QuoVadis Limited,C=BM
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   302
    "1.3.6.1.4.1.8024.0.2.100.1.2",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   303
    "Quo Vadis EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   304
    { 0x85, 0xA0, 0xDD, 0x7D, 0xD7, 0x20, 0xAD, 0xB7, 0xFF, 0x05, 0xF8,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   305
      0x3D, 0x54, 0x2B, 0x20, 0x9D, 0xC7, 0xFF, 0x45, 0x28, 0xF7, 0xD6,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   306
      0x77, 0xB1, 0x83, 0x89, 0xFE, 0xA5, 0xE5, 0xC4, 0x9E, 0x86 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   307
    "MEUxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMRswGQYD"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   308
    "VQQDExJRdW9WYWRpcyBSb290IENBIDI=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   309
    "BQk=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   310
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   311
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   312
    // CN=Network Solutions Certificate Authority,O=Network Solutions L.L.C.,C=US
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   313
    "1.3.6.1.4.1.782.1.2.1.8.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   314
    "Network Solutions EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   315
    { 0x15, 0xF0, 0xBA, 0x00, 0xA3, 0xAC, 0x7A, 0xF3, 0xAC, 0x88, 0x4C,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   316
      0x07, 0x2B, 0x10, 0x11, 0xA0, 0x77, 0xBD, 0x77, 0xC0, 0x97, 0xF4,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   317
      0x01, 0x64, 0xB2, 0xF8, 0x59, 0x8A, 0xBD, 0x83, 0x86, 0x0C },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   318
    "MGIxCzAJBgNVBAYTAlVTMSEwHwYDVQQKExhOZXR3b3JrIFNvbHV0aW9ucyBMLkwu"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   319
    "Qy4xMDAuBgNVBAMTJ05ldHdvcmsgU29sdXRpb25zIENlcnRpZmljYXRlIEF1dGhv"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   320
    "cml0eQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   321
    "V8szb8JcFuZHFhfjkDFo4A==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   322
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   323
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   324
    // CN=Entrust Root Certification Authority,OU="(c) 2006 Entrust, Inc.",OU=www.entrust.net/CPS is incorporated by reference,O="Entrust, Inc.",C=US
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   325
    "2.16.840.1.114028.10.1.2",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   326
    "Entrust EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   327
    { 0x73, 0xC1, 0x76, 0x43, 0x4F, 0x1B, 0xC6, 0xD5, 0xAD, 0xF4, 0x5B,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   328
      0x0E, 0x76, 0xE7, 0x27, 0x28, 0x7C, 0x8D, 0xE5, 0x76, 0x16, 0xC1,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   329
      0xE6, 0xE6, 0x14, 0x1A, 0x2B, 0x2C, 0xBC, 0x7D, 0x8E, 0x4C },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   330
    "MIGwMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjE5MDcGA1UE"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   331
    "CxMwd3d3LmVudHJ1c3QubmV0L0NQUyBpcyBpbmNvcnBvcmF0ZWQgYnkgcmVmZXJl"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   332
    "bmNlMR8wHQYDVQQLExYoYykgMjAwNiBFbnRydXN0LCBJbmMuMS0wKwYDVQQDEyRF"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   333
    "bnRydXN0IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHk=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   334
    "RWtQVA==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   335
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   336
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   337
    // CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
440762
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   338
    "2.23.140.1.1",
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   339
    "CA/Browser Forum EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   340
    { 0xEB, 0xD4, 0x10, 0x40, 0xE4, 0xBB, 0x3E, 0xC7, 0x42, 0xC9, 0xE3,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   341
      0x81, 0xD3, 0x1E, 0xF2, 0xA4, 0x1A, 0x48, 0xB6, 0x68, 0x5C, 0x96,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   342
      0xE7, 0xCE, 0xF3, 0xC1, 0xDF, 0x6C, 0xD4, 0x33, 0x1C, 0x99 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   343
    "MFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRAwDgYD"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   344
    "VQQLEwdSb290IENBMRswGQYDVQQDExJHbG9iYWxTaWduIFJvb3QgQ0E=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   345
    "BAAAAAABFUtaw5Q=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   346
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   347
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   348
    // CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R2
440762
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   349
    "2.23.140.1.1",
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   350
    "CA/Browser Forum EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   351
    { 0xCA, 0x42, 0xDD, 0x41, 0x74, 0x5F, 0xD0, 0xB8, 0x1E, 0xB9, 0x02,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   352
      0x36, 0x2C, 0xF9, 0xD8, 0xBF, 0x71, 0x9D, 0xA1, 0xBD, 0x1B, 0x1E,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   353
      0xFC, 0x94, 0x6F, 0x5B, 0x4C, 0x99, 0xF4, 0x2C, 0x1B, 0x9E },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   354
    "MEwxIDAeBgNVBAsTF0dsb2JhbFNpZ24gUm9vdCBDQSAtIFIyMRMwEQYDVQQKEwpH"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   355
    "bG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWdu",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   356
    "BAAAAAABD4Ym5g0=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   357
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   358
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   359
    // CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R3
440762
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   360
    "2.23.140.1.1",
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   361
    "CA/Browser Forum EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   362
    { 0xCB, 0xB5, 0x22, 0xD7, 0xB7, 0xF1, 0x27, 0xAD, 0x6A, 0x01, 0x13,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   363
      0x86, 0x5B, 0xDF, 0x1C, 0xD4, 0x10, 0x2E, 0x7D, 0x07, 0x59, 0xAF,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   364
      0x63, 0x5A, 0x7C, 0xF4, 0x72, 0x0D, 0xC9, 0x63, 0xC5, 0x3B },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   365
    "MEwxIDAeBgNVBAsTF0dsb2JhbFNpZ24gUm9vdCBDQSAtIFIzMRMwEQYDVQQKEwpH"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   366
    "bG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWdu",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   367
    "BAAAAAABIVhTCKI=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   368
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   369
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   370
    // CN=Buypass Class 3 Root CA,O=Buypass AS-983163327,C=NO
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   371
    "2.16.578.1.26.1.3.3",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   372
    "Buypass EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   373
    { 0xED, 0xF7, 0xEB, 0xBC, 0xA2, 0x7A, 0x2A, 0x38, 0x4D, 0x38, 0x7B,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   374
      0x7D, 0x40, 0x10, 0xC6, 0x66, 0xE2, 0xED, 0xB4, 0x84, 0x3E, 0x4C,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   375
      0x29, 0xB4, 0xAE, 0x1D, 0x5B, 0x93, 0x32, 0xE6, 0xB2, 0x4D },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   376
    "ME4xCzAJBgNVBAYTAk5PMR0wGwYDVQQKDBRCdXlwYXNzIEFTLTk4MzE2MzMyNzEg"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   377
    "MB4GA1UEAwwXQnV5cGFzcyBDbGFzcyAzIFJvb3QgQ0E=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   378
    "Ag==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   379
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   380
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   381
    // CN=Chambers of Commerce Root - 2008,O=AC Camerfirma S.A.,serialNumber=A82743287,L=Madrid (see current address at www.camerfirma.com/address),C=EU
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   382
    "1.3.6.1.4.1.17326.10.14.2.1.2",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   383
    "Camerfirma EV OID a",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   384
    { 0x06, 0x3E, 0x4A, 0xFA, 0xC4, 0x91, 0xDF, 0xD3, 0x32, 0xF3, 0x08,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   385
      0x9B, 0x85, 0x42, 0xE9, 0x46, 0x17, 0xD8, 0x93, 0xD7, 0xFE, 0x94,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   386
      0x4E, 0x10, 0xA7, 0x93, 0x7E, 0xE2, 0x9D, 0x96, 0x93, 0xC0 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   387
    "MIGuMQswCQYDVQQGEwJFVTFDMEEGA1UEBxM6TWFkcmlkIChzZWUgY3VycmVudCBh"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   388
    "ZGRyZXNzIGF0IHd3dy5jYW1lcmZpcm1hLmNvbS9hZGRyZXNzKTESMBAGA1UEBRMJ"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   389
    "QTgyNzQzMjg3MRswGQYDVQQKExJBQyBDYW1lcmZpcm1hIFMuQS4xKTAnBgNVBAMT"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   390
    "IENoYW1iZXJzIG9mIENvbW1lcmNlIFJvb3QgLSAyMDA4",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   391
    "AKPaQn6ksa7a",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   392
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   393
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   394
    // CN=Global Chambersign Root - 2008,O=AC Camerfirma S.A.,serialNumber=A82743287,L=Madrid (see current address at www.camerfirma.com/address),C=EU
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   395
    "1.3.6.1.4.1.17326.10.8.12.1.2",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   396
    "Camerfirma EV OID b",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   397
    { 0x13, 0x63, 0x35, 0x43, 0x93, 0x34, 0xA7, 0x69, 0x80, 0x16, 0xA0,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   398
      0xD3, 0x24, 0xDE, 0x72, 0x28, 0x4E, 0x07, 0x9D, 0x7B, 0x52, 0x20,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   399
      0xBB, 0x8F, 0xBD, 0x74, 0x78, 0x16, 0xEE, 0xBE, 0xBA, 0xCA },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   400
    "MIGsMQswCQYDVQQGEwJFVTFDMEEGA1UEBxM6TWFkcmlkIChzZWUgY3VycmVudCBh"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   401
    "ZGRyZXNzIGF0IHd3dy5jYW1lcmZpcm1hLmNvbS9hZGRyZXNzKTESMBAGA1UEBRMJ"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   402
    "QTgyNzQzMjg3MRswGQYDVQQKExJBQyBDYW1lcmZpcm1hIFMuQS4xJzAlBgNVBAMT"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   403
    "Hkdsb2JhbCBDaGFtYmVyc2lnbiBSb290IC0gMjAwOA==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   404
    "AMnN0+nVfSPO",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   405
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   406
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   407
    // CN=AffirmTrust Commercial,O=AffirmTrust,C=US
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   408
    "1.3.6.1.4.1.34697.2.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   409
    "AffirmTrust EV OID a",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   410
    { 0x03, 0x76, 0xAB, 0x1D, 0x54, 0xC5, 0xF9, 0x80, 0x3C, 0xE4, 0xB2,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   411
      0xE2, 0x01, 0xA0, 0xEE, 0x7E, 0xEF, 0x7B, 0x57, 0xB6, 0x36, 0xE8,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   412
      0xA9, 0x3C, 0x9B, 0x8D, 0x48, 0x60, 0xC9, 0x6F, 0x5F, 0xA7 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   413
    "MEQxCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1UcnVzdDEfMB0GA1UEAwwW"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   414
    "QWZmaXJtVHJ1c3QgQ29tbWVyY2lhbA==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   415
    "d3cGJyapsXw=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   416
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   417
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   418
    // CN=AffirmTrust Networking,O=AffirmTrust,C=US
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   419
    "1.3.6.1.4.1.34697.2.2",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   420
    "AffirmTrust EV OID b",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   421
    { 0x0A, 0x81, 0xEC, 0x5A, 0x92, 0x97, 0x77, 0xF1, 0x45, 0x90, 0x4A,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   422
      0xF3, 0x8D, 0x5D, 0x50, 0x9F, 0x66, 0xB5, 0xE2, 0xC5, 0x8F, 0xCD,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   423
      0xB5, 0x31, 0x05, 0x8B, 0x0E, 0x17, 0xF3, 0xF0, 0xB4, 0x1B },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   424
    "MEQxCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1UcnVzdDEfMB0GA1UEAwwW"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   425
    "QWZmaXJtVHJ1c3QgTmV0d29ya2luZw==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   426
    "fE8EORzUmS0=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   427
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   428
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   429
    // CN=AffirmTrust Premium,O=AffirmTrust,C=US
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   430
    "1.3.6.1.4.1.34697.2.3",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   431
    "AffirmTrust EV OID c",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   432
    { 0x70, 0xA7, 0x3F, 0x7F, 0x37, 0x6B, 0x60, 0x07, 0x42, 0x48, 0x90,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   433
      0x45, 0x34, 0xB1, 0x14, 0x82, 0xD5, 0xBF, 0x0E, 0x69, 0x8E, 0xCC,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   434
      0x49, 0x8D, 0xF5, 0x25, 0x77, 0xEB, 0xF2, 0xE9, 0x3B, 0x9A },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   435
    "MEExCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1UcnVzdDEcMBoGA1UEAwwT"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   436
    "QWZmaXJtVHJ1c3QgUHJlbWl1bQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   437
    "bYwURrGmCu4=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   438
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   439
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   440
    // CN=AffirmTrust Premium ECC,O=AffirmTrust,C=US
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   441
    "1.3.6.1.4.1.34697.2.4",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   442
    "AffirmTrust EV OID d",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   443
    { 0xBD, 0x71, 0xFD, 0xF6, 0xDA, 0x97, 0xE4, 0xCF, 0x62, 0xD1, 0x64,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   444
      0x7A, 0xDD, 0x25, 0x81, 0xB0, 0x7D, 0x79, 0xAD, 0xF8, 0x39, 0x7E,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   445
      0xB4, 0xEC, 0xBA, 0x9C, 0x5E, 0x84, 0x88, 0x82, 0x14, 0x23 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   446
    "MEUxCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1UcnVzdDEgMB4GA1UEAwwX"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   447
    "QWZmaXJtVHJ1c3QgUHJlbWl1bSBFQ0M=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   448
    "dJclisc/elQ=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   449
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   450
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   451
    // CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   452
    "1.2.616.1.113527.2.5.1.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   453
    "Certum EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   454
    { 0x5C, 0x58, 0x46, 0x8D, 0x55, 0xF5, 0x8E, 0x49, 0x7E, 0x74, 0x39,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   455
      0x82, 0xD2, 0xB5, 0x00, 0x10, 0xB6, 0xD1, 0x65, 0x37, 0x4A, 0xCF,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   456
      0x83, 0xA7, 0xD4, 0xA3, 0x2D, 0xB7, 0x68, 0xC4, 0x40, 0x8E },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   457
    "MH4xCzAJBgNVBAYTAlBMMSIwIAYDVQQKExlVbml6ZXRvIFRlY2hub2xvZ2llcyBT"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   458
    "LkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIjAg"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   459
    "BgNVBAMTGUNlcnR1bSBUcnVzdGVkIE5ldHdvcmsgQ0E=",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   460
    "BETA",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   461
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   462
  {
289041
480b307d65e6d1cd9bd0132884d8b66f3611ba81 bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 288368
diff changeset
   463
    // CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
480b307d65e6d1cd9bd0132884d8b66f3611ba81 bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 288368
diff changeset
   464
    "1.2.616.1.113527.2.5.1.1",
480b307d65e6d1cd9bd0132884d8b66f3611ba81 bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 288368
diff changeset
   465
    "Certum EV OID",
480b307d65e6d1cd9bd0132884d8b66f3611ba81 bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 288368
diff changeset
   466
    { 0xB6, 0x76, 0xF2, 0xED, 0xDA, 0xE8, 0x77, 0x5C, 0xD3, 0x6C, 0xB0,
480b307d65e6d1cd9bd0132884d8b66f3611ba81 bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 288368
diff changeset
   467
      0xF6, 0x3C, 0xD1, 0xD4, 0x60, 0x39, 0x61, 0xF4, 0x9E, 0x62, 0x65,
480b307d65e6d1cd9bd0132884d8b66f3611ba81 bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 288368
diff changeset
   468
      0xBA, 0x01, 0x3A, 0x2F, 0x03, 0x07, 0xB6, 0xD0, 0xB8, 0x04 },
480b307d65e6d1cd9bd0132884d8b66f3611ba81 bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 288368
diff changeset
   469
    "MIGAMQswCQYDVQQGEwJQTDEiMCAGA1UEChMZVW5pemV0byBUZWNobm9sb2dpZXMg"
480b307d65e6d1cd9bd0132884d8b66f3611ba81 bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 288368
diff changeset
   470
    "Uy5BLjEnMCUGA1UECxMeQ2VydHVtIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSQw"
480b307d65e6d1cd9bd0132884d8b66f3611ba81 bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 288368
diff changeset
   471
    "IgYDVQQDExtDZXJ0dW0gVHJ1c3RlZCBOZXR3b3JrIENBIDI=",
480b307d65e6d1cd9bd0132884d8b66f3611ba81 bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 288368
diff changeset
   472
    "IdbQSk8lD8kyN/yqXhKN6Q==",
480b307d65e6d1cd9bd0132884d8b66f3611ba81 bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 288368
diff changeset
   473
  },
480b307d65e6d1cd9bd0132884d8b66f3611ba81 bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 288368
diff changeset
   474
  {
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   475
    // CN=Izenpe.com,O=IZENPE S.A.,C=ES
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   476
    "1.3.6.1.4.1.14777.6.1.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   477
    "Izenpe EV OID 1",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   478
    { 0x25, 0x30, 0xCC, 0x8E, 0x98, 0x32, 0x15, 0x02, 0xBA, 0xD9, 0x6F,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   479
      0x9B, 0x1F, 0xBA, 0x1B, 0x09, 0x9E, 0x2D, 0x29, 0x9E, 0x0F, 0x45,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   480
      0x48, 0xBB, 0x91, 0x4F, 0x36, 0x3B, 0xC0, 0xD4, 0x53, 0x1F },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   481
    "MDgxCzAJBgNVBAYTAkVTMRQwEgYDVQQKDAtJWkVOUEUgUy5BLjETMBEGA1UEAwwK"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   482
    "SXplbnBlLmNvbQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   483
    "ALC3WhZIX7/hy/WL1xnmfQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   484
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   485
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   486
    // CN=Izenpe.com,O=IZENPE S.A.,C=ES
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   487
    "1.3.6.1.4.1.14777.6.1.2",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   488
    "Izenpe EV OID 2",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   489
    { 0x25, 0x30, 0xCC, 0x8E, 0x98, 0x32, 0x15, 0x02, 0xBA, 0xD9, 0x6F,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   490
      0x9B, 0x1F, 0xBA, 0x1B, 0x09, 0x9E, 0x2D, 0x29, 0x9E, 0x0F, 0x45,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   491
      0x48, 0xBB, 0x91, 0x4F, 0x36, 0x3B, 0xC0, 0xD4, 0x53, 0x1F },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   492
    "MDgxCzAJBgNVBAYTAkVTMRQwEgYDVQQKDAtJWkVOUEUgUy5BLjETMBEGA1UEAwwK"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   493
    "SXplbnBlLmNvbQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   494
    "ALC3WhZIX7/hy/WL1xnmfQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   495
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   496
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   497
    // CN=T-TeleSec GlobalRoot Class 3,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   498
    "1.3.6.1.4.1.7879.13.24.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   499
    "T-Systems EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   500
    { 0xFD, 0x73, 0xDA, 0xD3, 0x1C, 0x64, 0x4F, 0xF1, 0xB4, 0x3B, 0xEF,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   501
      0x0C, 0xCD, 0xDA, 0x96, 0x71, 0x0B, 0x9C, 0xD9, 0x87, 0x5E, 0xCA,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   502
      0x7E, 0x31, 0x70, 0x7A, 0xF3, 0xE9, 0x6D, 0x52, 0x2B, 0xBD },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   503
    "MIGCMQswCQYDVQQGEwJERTErMCkGA1UECgwiVC1TeXN0ZW1zIEVudGVycHJpc2Ug"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   504
    "U2VydmljZXMgR21iSDEfMB0GA1UECwwWVC1TeXN0ZW1zIFRydXN0IENlbnRlcjEl"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   505
    "MCMGA1UEAwwcVC1UZWxlU2VjIEdsb2JhbFJvb3QgQ2xhc3MgMw==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   506
    "AQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   507
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   508
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   509
    // CN=TWCA Root Certification Authority,OU=Root CA,O=TAIWAN-CA,C=TW
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   510
    "1.3.6.1.4.1.40869.1.1.22.3",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   511
    "TWCA EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   512
    { 0xBF, 0xD8, 0x8F, 0xE1, 0x10, 0x1C, 0x41, 0xAE, 0x3E, 0x80, 0x1B,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   513
      0xF8, 0xBE, 0x56, 0x35, 0x0E, 0xE9, 0xBA, 0xD1, 0xA6, 0xB9, 0xBD,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   514
      0x51, 0x5E, 0xDC, 0x5C, 0x6D, 0x5B, 0x87, 0x11, 0xAC, 0x44 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   515
    "MF8xCzAJBgNVBAYTAlRXMRIwEAYDVQQKDAlUQUlXQU4tQ0ExEDAOBgNVBAsMB1Jv"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   516
    "b3QgQ0ExKjAoBgNVBAMMIVRXQ0EgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   517
    "eQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   518
    "AQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   519
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   520
  {
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   521
    // CN=D-TRUST Root Class 3 CA 2 EV 2009,O=D-Trust GmbH,C=DE
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   522
    "1.3.6.1.4.1.4788.2.202.1",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   523
    "D-TRUST EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   524
    { 0xEE, 0xC5, 0x49, 0x6B, 0x98, 0x8C, 0xE9, 0x86, 0x25, 0xB9, 0x34,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   525
      0x09, 0x2E, 0xEC, 0x29, 0x08, 0xBE, 0xD0, 0xB0, 0xF3, 0x16, 0xC2,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   526
      0xD4, 0x73, 0x0C, 0x84, 0xEA, 0xF1, 0xF3, 0xD3, 0x48, 0x81 },
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   527
    "MFAxCzAJBgNVBAYTAkRFMRUwEwYDVQQKDAxELVRydXN0IEdtYkgxKjAoBgNVBAMM"
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   528
    "IUQtVFJVU1QgUm9vdCBDbGFzcyAzIENBIDIgRVYgMjAwOQ==",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   529
    "CYP0",
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   530
  },
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   531
  {
173098
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   532
    // CN = Autoridad de Certificacion Firmaprofesional CIF A62634068, C = ES
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   533
    "1.3.6.1.4.1.13177.10.1.3.10",
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   534
    "Firmaprofesional EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   535
    { 0x04, 0x04, 0x80, 0x28, 0xBF, 0x1F, 0x28, 0x64, 0xD4, 0x8F, 0x9A,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   536
      0xD4, 0xD8, 0x32, 0x94, 0x36, 0x6A, 0x82, 0x88, 0x56, 0x55, 0x3F,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   537
      0x3B, 0x14, 0x30, 0x3F, 0x90, 0x14, 0x7F, 0x5D, 0x40, 0xEF },
173098
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   538
    "MFExCzAJBgNVBAYTAkVTMUIwQAYDVQQDDDlBdXRvcmlkYWQgZGUgQ2VydGlmaWNh"
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   539
    "Y2lvbiBGaXJtYXByb2Zlc2lvbmFsIENJRiBBNjI2MzQwNjg=",
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   540
    "U+w77vuySF8=",
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   541
  },
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   542
  {
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   543
    // CN = TWCA Global Root CA, OU = Root CA, O = TAIWAN-CA, C = TW
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   544
    "1.3.6.1.4.1.40869.1.1.22.3",
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   545
    "TWCA EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   546
    { 0x59, 0x76, 0x90, 0x07, 0xF7, 0x68, 0x5D, 0x0F, 0xCD, 0x50, 0x87,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   547
      0x2F, 0x9F, 0x95, 0xD5, 0x75, 0x5A, 0x5B, 0x2B, 0x45, 0x7D, 0x81,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   548
      0xF3, 0x69, 0x2B, 0x61, 0x0A, 0x98, 0x67, 0x2F, 0x0E, 0x1B },
173098
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   549
    "MFExCzAJBgNVBAYTAlRXMRIwEAYDVQQKEwlUQUlXQU4tQ0ExEDAOBgNVBAsTB1Jv"
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   550
    "b3QgQ0ExHDAaBgNVBAMTE1RXQ0EgR2xvYmFsIFJvb3QgQ0E=",
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   551
    "DL4=",
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   552
  },
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   553
  {
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   554
    // CN = E-Tugra Certification Authority, OU = E-Tugra Sertifikasyon Merkezi, O = E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., L = Ankara, C = TR
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   555
    "2.16.792.3.0.4.1.1.4",
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   556
    "ETugra EV OID",
185916
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   557
    { 0xB0, 0xBF, 0xD5, 0x2B, 0xB0, 0xD7, 0xD9, 0xBD, 0x92, 0xBF, 0x5D,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   558
      0x4D, 0xC1, 0x3D, 0xA2, 0x55, 0xC0, 0x2C, 0x54, 0x2F, 0x37, 0x83,
e2558aae0cf7817a564e0a66006472cf52cca6d5 Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 183491
diff changeset
   559
      0x65, 0xEA, 0x89, 0x39, 0x11, 0xF5, 0x5E, 0x55, 0xF2, 0x3C },
173098
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   560
    "MIGyMQswCQYDVQQGEwJUUjEPMA0GA1UEBwwGQW5rYXJhMUAwPgYDVQQKDDdFLVR1"
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   561
    "xJ9yYSBFQkcgQmlsacWfaW0gVGVrbm9sb2ppbGVyaSB2ZSBIaXptZXRsZXJpIEEu"
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   562
    "xZ4uMSYwJAYDVQQLDB1FLVR1Z3JhIFNlcnRpZmlrYXN5b24gTWVya2V6aTEoMCYG"
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   563
    "A1UEAwwfRS1UdWdyYSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQ==",
a1a9976d954e0b088a86c302773dfe0e528b0932 Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 170833
diff changeset
   564
    "amg+nFGby1M=",
202291
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   565
  },
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   566
  {
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   567
    // CN=Actalis Authentication Root CA,O=Actalis S.p.A./03358520967,L=Milan,C=IT
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   568
    "1.3.159.1.17.1",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   569
    "Actalis EV OID",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   570
    { 0x55, 0x92, 0x60, 0x84, 0xEC, 0x96, 0x3A, 0x64, 0xB9, 0x6E, 0x2A,
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   571
      0xBE, 0x01, 0xCE, 0x0B, 0xA8, 0x6A, 0x64, 0xFB, 0xFE, 0xBC, 0xC7,
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   572
      0xAA, 0xB5, 0xAF, 0xC1, 0x55, 0xB3, 0x7F, 0xD7, 0x60, 0x66 },
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   573
    "MGsxCzAJBgNVBAYTAklUMQ4wDAYDVQQHDAVNaWxhbjEjMCEGA1UECgwaQWN0YWxp"
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   574
    "cyBTLnAuQS4vMDMzNTg1MjA5NjcxJzAlBgNVBAMMHkFjdGFsaXMgQXV0aGVudGlj"
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   575
    "YXRpb24gUm9vdCBDQQ==",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   576
    "VwoRl0LE48w=",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   577
  },
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   578
  {
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   579
    // CN=DigiCert Assured ID Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   580
    "2.16.840.1.114412.2.1",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   581
    "DigiCert EV OID",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   582
    { 0x7D, 0x05, 0xEB, 0xB6, 0x82, 0x33, 0x9F, 0x8C, 0x94, 0x51, 0xEE,
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   583
      0x09, 0x4E, 0xEB, 0xFE, 0xFA, 0x79, 0x53, 0xA1, 0x14, 0xED, 0xB2,
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   584
      0xF4, 0x49, 0x49, 0x45, 0x2F, 0xAB, 0x7D, 0x2F, 0xC1, 0x85 },
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   585
    "MGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsT"
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   586
    "EHd3dy5kaWdpY2VydC5jb20xJDAiBgNVBAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQg"
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   587
    "Um9vdCBHMg==",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   588
    "C5McOtY5Z+pnI7/Dr5r0Sw==",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   589
  },
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   590
  {
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   591
    // CN=DigiCert Assured ID Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   592
    "2.16.840.1.114412.2.1",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   593
    "DigiCert EV OID",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   594
    { 0x7E, 0x37, 0xCB, 0x8B, 0x4C, 0x47, 0x09, 0x0C, 0xAB, 0x36, 0x55,
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   595
      0x1B, 0xA6, 0xF4, 0x5D, 0xB8, 0x40, 0x68, 0x0F, 0xBA, 0x16, 0x6A,
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   596
      0x95, 0x2D, 0xB1, 0x00, 0x71, 0x7F, 0x43, 0x05, 0x3F, 0xC2 },
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   597
    "MGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsT"
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   598
    "EHd3dy5kaWdpY2VydC5jb20xJDAiBgNVBAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQg"
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   599
    "Um9vdCBHMw==",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   600
    "C6Fa+h3foLVJRK/NJKBs7A==",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   601
  },
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   602
  {
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   603
    // CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   604
    "2.16.840.1.114412.2.1",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   605
    "DigiCert EV OID",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   606
    { 0xCB, 0x3C, 0xCB, 0xB7, 0x60, 0x31, 0xE5, 0xE0, 0x13, 0x8F, 0x8D,
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   607
      0xD3, 0x9A, 0x23, 0xF9, 0xDE, 0x47, 0xFF, 0xC3, 0x5E, 0x43, 0xC1,
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   608
      0x14, 0x4C, 0xEA, 0x27, 0xD4, 0x6A, 0x5A, 0xB1, 0xCB, 0x5F },
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   609
    "MGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsT"
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   610
    "EHd3dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290"
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   611
    "IEcy",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   612
    "Azrx5qcRqaC7KGSxHQn65Q==",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   613
  },
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   614
  {
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   615
    // CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   616
    "2.16.840.1.114412.2.1",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   617
    "DigiCert EV OID",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   618
    { 0x31, 0xAD, 0x66, 0x48, 0xF8, 0x10, 0x41, 0x38, 0xC7, 0x38, 0xF3,
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   619
      0x9E, 0xA4, 0x32, 0x01, 0x33, 0x39, 0x3E, 0x3A, 0x18, 0xCC, 0x02,
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   620
      0x29, 0x6E, 0xF9, 0x7C, 0x2A, 0xC9, 0xEF, 0x67, 0x31, 0xD0 },
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   621
    "MGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsT"
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   622
    "EHd3dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290"
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   623
    "IEcz",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   624
    "BVVWvPJepDU1w6QP1atFcg==",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   625
  },
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   626
  {
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   627
    // CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   628
    "2.16.840.1.114412.2.1",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   629
    "DigiCert EV OID",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   630
    { 0x55, 0x2F, 0x7B, 0xDC, 0xF1, 0xA7, 0xAF, 0x9E, 0x6C, 0xE6, 0x72,
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   631
      0x01, 0x7F, 0x4F, 0x12, 0xAB, 0xF7, 0x72, 0x40, 0xC7, 0x8E, 0x76,
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   632
      0x1A, 0xC2, 0x03, 0xD1, 0xD9, 0xD2, 0x0A, 0xC8, 0x99, 0x88 },
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   633
    "MGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsT"
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   634
    "EHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9v"
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   635
    "dCBHNA==",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   636
    "BZsbV56OITLiOQe9p3d1XA==",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   637
  },
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   638
  {
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   639
    // CN=QuoVadis Root CA 2 G3,O=QuoVadis Limited,C=BM
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   640
    "1.3.6.1.4.1.8024.0.2.100.1.2",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   641
    "QuoVadis EV OID",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   642
    { 0x8F, 0xE4, 0xFB, 0x0A, 0xF9, 0x3A, 0x4D, 0x0D, 0x67, 0xDB, 0x0B,
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   643
      0xEB, 0xB2, 0x3E, 0x37, 0xC7, 0x1B, 0xF3, 0x25, 0xDC, 0xBC, 0xDD,
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   644
      0x24, 0x0E, 0xA0, 0x4D, 0xAF, 0x58, 0xB4, 0x7E, 0x18, 0x40 },
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   645
    "MEgxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMR4wHAYD"
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   646
    "VQQDExVRdW9WYWRpcyBSb290IENBIDIgRzM=",
bbb7d48bfea8e6748ab41a032561fde6aa06f749 Bug 1052099 - August 2014 batch of EV root CA changes. r=keeler
Camilo Viecco <cviecco@mozilla.com>
parents: 189913
diff changeset
   647
    "RFc0JFuBiZs18s64KztbpybwdSg=",
217455
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   648
  },
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   649
  {
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   650
    // CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   651
    "1.3.6.1.4.1.6449.1.2.1.5.1",
217648
61a1388dd1bc41566318247a2796016fbdf3473c bug 1104109 - follow-up to fix new EV OID description strings (they need to match if the OIDs are the same) r=keeler
Rob Stradling <rob@comodo.com>
parents: 217455
diff changeset
   652
    "Comodo EV OID",
217455
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   653
    { 0x52, 0xF0, 0xE1, 0xC4, 0xE5, 0x8E, 0xC6, 0x29, 0x29, 0x1B, 0x60,
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   654
      0x31, 0x7F, 0x07, 0x46, 0x71, 0xB8, 0x5D, 0x7E, 0xA8, 0x0D, 0x5B,
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   655
      0x07, 0x27, 0x34, 0x63, 0x53, 0x4B, 0x32, 0xB4, 0x02, 0x34 },
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   656
    "MIGFMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAw"
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   657
    "DgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDErMCkG"
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   658
    "A1UEAxMiQ09NT0RPIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQ==",
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   659
    "TKr5yttjb+Af907YWwOGnQ==",
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   660
  },
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   661
  {
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   662
    // CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   663
    "1.3.6.1.4.1.6449.1.2.1.5.1",
217648
61a1388dd1bc41566318247a2796016fbdf3473c bug 1104109 - follow-up to fix new EV OID description strings (they need to match if the OIDs are the same) r=keeler
Rob Stradling <rob@comodo.com>
parents: 217455
diff changeset
   664
    "Comodo EV OID",
217455
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   665
    { 0xE7, 0x93, 0xC9, 0xB0, 0x2F, 0xD8, 0xAA, 0x13, 0xE2, 0x1C, 0x31,
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   666
      0x22, 0x8A, 0xCC, 0xB0, 0x81, 0x19, 0x64, 0x3B, 0x74, 0x9C, 0x89,
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   667
      0x89, 0x64, 0xB1, 0x74, 0x6D, 0x46, 0xC3, 0xD4, 0xCB, 0xD2 },
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   668
    "MIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKTmV3IEplcnNleTEUMBIGA1UEBxML"
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   669
    "SmVyc2V5IENpdHkxHjAcBgNVBAoTFVRoZSBVU0VSVFJVU1QgTmV0d29yazEuMCwG"
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   670
    "A1UEAxMlVVNFUlRydXN0IFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQ==",
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   671
    "Af1tMPyjylGoG7xkDjUDLQ==",
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   672
  },
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   673
  {
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   674
    // CN=USERTrust ECC Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   675
    "1.3.6.1.4.1.6449.1.2.1.5.1",
217648
61a1388dd1bc41566318247a2796016fbdf3473c bug 1104109 - follow-up to fix new EV OID description strings (they need to match if the OIDs are the same) r=keeler
Rob Stradling <rob@comodo.com>
parents: 217455
diff changeset
   676
    "Comodo EV OID",
217455
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   677
    { 0x4F, 0xF4, 0x60, 0xD5, 0x4B, 0x9C, 0x86, 0xDA, 0xBF, 0xBC, 0xFC,
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   678
      0x57, 0x12, 0xE0, 0x40, 0x0D, 0x2B, 0xED, 0x3F, 0xBC, 0x4D, 0x4F,
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   679
      0xBD, 0xAA, 0x86, 0xE0, 0x6A, 0xDC, 0xD2, 0xA9, 0xAD, 0x7A },
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   680
    "MIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKTmV3IEplcnNleTEUMBIGA1UEBxML"
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   681
    "SmVyc2V5IENpdHkxHjAcBgNVBAoTFVRoZSBVU0VSVFJVU1QgTmV0d29yazEuMCwG"
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   682
    "A1UEAxMlVVNFUlRydXN0IEVDQyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQ==",
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   683
    "XIuZxVqUxdJxVt7NiYDMJg==",
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   684
  },
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   685
  {
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   686
    // CN=GlobalSign,O=GlobalSign,OU=GlobalSign ECC Root CA - R5
440762
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   687
    "2.23.140.1.1",
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   688
    "CA/Browser Forum EV OID",
217455
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   689
    { 0x17, 0x9F, 0xBC, 0x14, 0x8A, 0x3D, 0xD0, 0x0F, 0xD2, 0x4E, 0xA1,
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   690
      0x34, 0x58, 0xCC, 0x43, 0xBF, 0xA7, 0xF5, 0x9C, 0x81, 0x82, 0xD7,
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   691
      0x83, 0xA5, 0x13, 0xF6, 0xEB, 0xEC, 0x10, 0x0C, 0x89, 0x24 },
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   692
    "MFAxJDAiBgNVBAsTG0dsb2JhbFNpZ24gRUNDIFJvb3QgQ0EgLSBSNTETMBEGA1UE"
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   693
    "ChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbg==",
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   694
    "YFlJ4CYuu1X5CneKcflK2Gw=",
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   695
  },
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   696
  {
440762
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   697
    // CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R6
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   698
    "2.23.140.1.1",
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   699
    "CA/Browser Forum EV OID",
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   700
    { 0x2C, 0xAB, 0xEA, 0xFE, 0x37, 0xD0, 0x6C, 0xA2, 0x2A, 0xBA, 0x73,
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   701
      0x91, 0xC0, 0x03, 0x3D, 0x25, 0x98, 0x29, 0x52, 0xC4, 0x53, 0x64,
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   702
      0x73, 0x49, 0x76, 0x3A, 0x3A, 0xB5, 0xAD, 0x6C, 0xCF, 0x69 },
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   703
    "MEwxIDAeBgNVBAsTF0dsb2JhbFNpZ24gUm9vdCBDQSAtIFI2MRMwEQYDVQQKEwpH"
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   704
    "bG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWdu",
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   705
    "Rea7A4Mzw4VlSOb/RVE=",
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   706
  },
7381bd2bb8eb974217ed0843cb808381e2aabe67 bug 1478480 - enable GlobalSign Root CA - R6 for EV in PSM r=franziskus
Dana Keeler <dkeeler@mozilla.com>
parents: 439251
diff changeset
   707
  {
217455
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   708
    // CN=Entrust.net Certification Authority (2048),OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.),O=Entrust.net
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   709
    "2.16.840.1.114028.10.1.2",
217648
61a1388dd1bc41566318247a2796016fbdf3473c bug 1104109 - follow-up to fix new EV OID description strings (they need to match if the OIDs are the same) r=keeler
Rob Stradling <rob@comodo.com>
parents: 217455
diff changeset
   710
    "Entrust EV OID",
217455
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   711
    { 0x6D, 0xC4, 0x71, 0x72, 0xE0, 0x1C, 0xBC, 0xB0, 0xBF, 0x62, 0x58,
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   712
      0x0D, 0x89, 0x5F, 0xE2, 0xB8, 0xAC, 0x9A, 0xD4, 0xF8, 0x73, 0x80,
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   713
      0x1E, 0x0C, 0x10, 0xB9, 0xC8, 0x37, 0xD2, 0x1E, 0xB1, 0x77 },
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   714
    "MIG0MRQwEgYDVQQKEwtFbnRydXN0Lm5ldDFAMD4GA1UECxQ3d3d3LmVudHJ1c3Qu"
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   715
    "bmV0L0NQU18yMDQ4IGluY29ycC4gYnkgcmVmLiAobGltaXRzIGxpYWIuKTElMCMG"
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   716
    "A1UECxMcKGMpIDE5OTkgRW50cnVzdC5uZXQgTGltaXRlZDEzMDEGA1UEAxMqRW50"
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   717
    "cnVzdC5uZXQgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgKDIwNDgp",
f24a2739398dae5f38013f56dee054420ea19950 Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
J.C. Jones <jjones@mozilla.com>
parents: 214305
diff changeset
   718
    "OGPe+A==",
238395
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   719
  },
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   720
  {
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   721
    // CN=Staat der Nederlanden EV Root CA,O=Staat der Nederlanden,C=NL
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   722
    "2.16.528.1.1003.1.2.7",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   723
    "Staat der Nederlanden EV OID",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   724
    { 0x4D, 0x24, 0x91, 0x41, 0x4C, 0xFE, 0x95, 0x67, 0x46, 0xEC, 0x4C,
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   725
      0xEF, 0xA6, 0xCF, 0x6F, 0x72, 0xE2, 0x8A, 0x13, 0x29, 0x43, 0x2F,
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   726
      0x9D, 0x8A, 0x90, 0x7A, 0xC4, 0xCB, 0x5D, 0xAD, 0xC1, 0x5A },
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   727
    "MFgxCzAJBgNVBAYTAk5MMR4wHAYDVQQKDBVTdGFhdCBkZXIgTmVkZXJsYW5kZW4x"
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   728
    "KTAnBgNVBAMMIFN0YWF0IGRlciBOZWRlcmxhbmRlbiBFViBSb290IENB",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   729
    "AJiWjQ==",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   730
  },
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   731
  {
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   732
    // CN=Entrust Root Certification Authority - G2,OU="(c) 2009 Entrust, Inc. - for authorized use only",OU=See www.entrust.net/legal-terms,O="Entrust, Inc.",C=US
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   733
    "2.16.840.1.114028.10.1.2",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   734
    "Entrust EV OID",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   735
    { 0x43, 0xDF, 0x57, 0x74, 0xB0, 0x3E, 0x7F, 0xEF, 0x5F, 0xE4, 0x0D,
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   736
      0x93, 0x1A, 0x7B, 0xED, 0xF1, 0xBB, 0x2E, 0x6B, 0x42, 0x73, 0x8C,
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   737
      0x4E, 0x6D, 0x38, 0x41, 0x10, 0x3D, 0x3A, 0xA7, 0xF3, 0x39 },
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   738
    "MIG+MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UE"
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   739
    "CxMfU2VlIHd3dy5lbnRydXN0Lm5ldC9sZWdhbC10ZXJtczE5MDcGA1UECxMwKGMp"
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   740
    "IDIwMDkgRW50cnVzdCwgSW5jLiAtIGZvciBhdXRob3JpemVkIHVzZSBvbmx5MTIw"
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   741
    "MAYDVQQDEylFbnRydXN0IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBH"
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   742
    "Mg==",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   743
    "SlOMKA==",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   744
  },
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   745
  {
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   746
    // CN=Entrust Root Certification Authority - EC1,OU="(c) 2012 Entrust, Inc. - for authorized use only",OU=See www.entrust.net/legal-terms,O="Entrust, Inc.",C=US
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   747
    "2.16.840.1.114028.10.1.2",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   748
    "Entrust EV OID",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   749
    { 0x02, 0xED, 0x0E, 0xB2, 0x8C, 0x14, 0xDA, 0x45, 0x16, 0x5C, 0x56,
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   750
      0x67, 0x91, 0x70, 0x0D, 0x64, 0x51, 0xD7, 0xFB, 0x56, 0xF0, 0xB2,
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   751
      0xAB, 0x1D, 0x3B, 0x8E, 0xB0, 0x70, 0xE5, 0x6E, 0xDF, 0xF5 },
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   752
    "MIG/MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UE"
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   753
    "CxMfU2VlIHd3dy5lbnRydXN0Lm5ldC9sZWdhbC10ZXJtczE5MDcGA1UECxMwKGMp"
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   754
    "IDIwMTIgRW50cnVzdCwgSW5jLiAtIGZvciBhdXRob3JpemVkIHVzZSBvbmx5MTMw"
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   755
    "MQYDVQQDEypFbnRydXN0IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBF"
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   756
    "QzE=",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   757
    "AKaLeSkAAAAAUNCR+Q==",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   758
  },
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   759
  {
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   760
    // CN=CFCA EV ROOT,O=China Financial Certification Authority,C=CN
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   761
    "2.16.156.112554.3",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   762
    "CFCA EV OID",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   763
    { 0x5C, 0xC3, 0xD7, 0x8E, 0x4E, 0x1D, 0x5E, 0x45, 0x54, 0x7A, 0x04,
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   764
      0xE6, 0x87, 0x3E, 0x64, 0xF9, 0x0C, 0xF9, 0x53, 0x6D, 0x1C, 0xCC,
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   765
      0x2E, 0xF8, 0x00, 0xF3, 0x55, 0xC4, 0xC5, 0xFD, 0x70, 0xFD },
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   766
    "MFYxCzAJBgNVBAYTAkNOMTAwLgYDVQQKDCdDaGluYSBGaW5hbmNpYWwgQ2VydGlm"
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   767
    "aWNhdGlvbiBBdXRob3JpdHkxFTATBgNVBAMMDENGQ0EgRVYgUk9PVA==",
265b6b657740eb667225d7b82aabdb74a263ad30 Bug 1132689 - Feb 2015 batch of EV root CA Changes. r=keeler
Mark Goodwin <mgoodwin@mozilla.com>
parents: 237232
diff changeset
   768
    "GErM1g==",
276723
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   769
  },
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   770
  {
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   771
    // OU=Security Communication RootCA2,O="SECOM Trust Systems CO.,LTD.",C=JP
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   772
    "1.2.392.200091.100.721.1",
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   773
    "SECOM EV OID",
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   774
    { 0x51, 0x3B, 0x2C, 0xEC, 0xB8, 0x10, 0xD4, 0xCD, 0xE5, 0xDD, 0x85,
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   775
      0x39, 0x1A, 0xDF, 0xC6, 0xC2, 0xDD, 0x60, 0xD8, 0x7B, 0xB7, 0x36,
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   776
      0xD2, 0xB5, 0x21, 0x48, 0x4A, 0xA4, 0x7A, 0x0E, 0xBE, 0xF6 },
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   777
    "MF0xCzAJBgNVBAYTAkpQMSUwIwYDVQQKExxTRUNPTSBUcnVzdCBTeXN0ZW1zIENP"
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   778
    "LixMVEQuMScwJQYDVQQLEx5TZWN1cml0eSBDb21tdW5pY2F0aW9uIFJvb3RDQTI=",
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   779
    "AA==",
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   780
  },
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   781
  {
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   782
    // CN=OISTE WISeKey Global Root GB CA,OU=OISTE Foundation Endorsed,O=WISeKey,C=CH
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   783
    "2.16.756.5.14.7.4.8",
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   784
    "WISeKey EV OID",
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   785
    { 0x6B, 0x9C, 0x08, 0xE8, 0x6E, 0xB0, 0xF7, 0x67, 0xCF, 0xAD, 0x65,
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   786
      0xCD, 0x98, 0xB6, 0x21, 0x49, 0xE5, 0x49, 0x4A, 0x67, 0xF5, 0x84,
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   787
      0x5E, 0x7B, 0xD1, 0xED, 0x01, 0x9F, 0x27, 0xB8, 0x6B, 0xD6 },
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   788
    "MG0xCzAJBgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYDVQQLExlPSVNU"
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   789
    "RSBGb3VuZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEds"
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   790
    "b2JhbCBSb290IEdCIENB",
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   791
    "drEgUnTwhYdGs/gjGvbCwA==",
bada0e17da331f58bf4bc1b1f177dd47e2a41181 bug 1230994 - December 2015 batch of EV root CA changes r=mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 272366
diff changeset
   792
  },
305535
8a26f6b014e67c5829f2c2a28b82f9b28fc0737d bug 1274677 - Enable Certplus and OpenTrust root certificates for EV in PSM r=Cykesiopka
David Keeler <dkeeler@mozilla.com>
parents: 289041
diff changeset
   793
  {
332044
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   794
    // CN=Amazon Root CA 1,O=Amazon,C=US
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   795
    "2.23.140.1.1",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   796
    "CA/Browser Forum EV OID",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   797
    { 0x8E, 0xCD, 0xE6, 0x88, 0x4F, 0x3D, 0x87, 0xB1, 0x12, 0x5B, 0xA3,
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   798
      0x1A, 0xC3, 0xFC, 0xB1, 0x3D, 0x70, 0x16, 0xDE, 0x7F, 0x57, 0xCC,
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   799
      0x90, 0x4F, 0xE1, 0xCB, 0x97, 0xC6, 0xAE, 0x98, 0x19, 0x6E },
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   800
    "MDkxCzAJBgNVBAYTAlVTMQ8wDQYDVQQKEwZBbWF6b24xGTAXBgNVBAMTEEFtYXpv"
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   801
    "biBSb290IENBIDE=",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   802
    "Bmyfz5m/jAo54vB4ikPmljZbyg==",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   803
  },
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   804
  {
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   805
    // CN=Amazon Root CA 2,O=Amazon,C=US
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   806
    "2.23.140.1.1",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   807
    "CA/Browser Forum EV OID",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   808
    { 0x1B, 0xA5, 0xB2, 0xAA, 0x8C, 0x65, 0x40, 0x1A, 0x82, 0x96, 0x01,
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   809
      0x18, 0xF8, 0x0B, 0xEC, 0x4F, 0x62, 0x30, 0x4D, 0x83, 0xCE, 0xC4,
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   810
      0x71, 0x3A, 0x19, 0xC3, 0x9C, 0x01, 0x1E, 0xA4, 0x6D, 0xB4 },
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   811
    "MDkxCzAJBgNVBAYTAlVTMQ8wDQYDVQQKEwZBbWF6b24xGTAXBgNVBAMTEEFtYXpv"
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   812
    "biBSb290IENBIDI=",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   813
    "Bmyf0pY1hp8KD+WGePhbJruKNw==",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   814
  },
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   815
  {
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   816
    // CN=Amazon Root CA 3,O=Amazon,C=US
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   817
    "2.23.140.1.1",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   818
    "CA/Browser Forum EV OID",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   819
    { 0x18, 0xCE, 0x6C, 0xFE, 0x7B, 0xF1, 0x4E, 0x60, 0xB2, 0xE3, 0x47,
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   820
      0xB8, 0xDF, 0xE8, 0x68, 0xCB, 0x31, 0xD0, 0x2E, 0xBB, 0x3A, 0xDA,
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   821
      0x27, 0x15, 0x69, 0xF5, 0x03, 0x43, 0xB4, 0x6D, 0xB3, 0xA4 },
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   822
    "MDkxCzAJBgNVBAYTAlVTMQ8wDQYDVQQKEwZBbWF6b24xGTAXBgNVBAMTEEFtYXpv"
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   823
    "biBSb290IENBIDM=",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   824
    "Bmyf1XSXNmY/Owua2eiedgPySg==",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   825
  },
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   826
  {
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   827
    // CN=Amazon Root CA 4,O=Amazon,C=US
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   828
    "2.23.140.1.1",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   829
    "CA/Browser Forum EV OID",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   830
    { 0xE3, 0x5D, 0x28, 0x41, 0x9E, 0xD0, 0x20, 0x25, 0xCF, 0xA6, 0x90,
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   831
      0x38, 0xCD, 0x62, 0x39, 0x62, 0x45, 0x8D, 0xA5, 0xC6, 0x95, 0xFB,
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   832
      0xDE, 0xA3, 0xC2, 0x2B, 0x0B, 0xFB, 0x25, 0x89, 0x70, 0x92 },
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   833
    "MDkxCzAJBgNVBAYTAlVTMQ8wDQYDVQQKEwZBbWF6b24xGTAXBgNVBAMTEEFtYXpv"
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   834
    "biBSb290IENBIDQ=",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   835
    "Bmyf18G7EEwpQ+Vxe3ssyBrBDg==",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   836
  },
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   837
  {
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   838
    // CN=Starfield Services Root Certificate Authority - G2,O="Starfield Technologies, Inc.",L=Scottsdale,ST=Arizona,C=US
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   839
    "2.23.140.1.1",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   840
    "CA/Browser Forum EV OID",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   841
    { 0x56, 0x8D, 0x69, 0x05, 0xA2, 0xC8, 0x87, 0x08, 0xA4, 0xB3, 0x02,
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   842
      0x51, 0x90, 0xED, 0xCF, 0xED, 0xB1, 0x97, 0x4A, 0x60, 0x6A, 0x13,
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   843
      0xC6, 0xE5, 0x29, 0x0F, 0xCB, 0x2A, 0xE6, 0x3E, 0xDA, 0xB5 },
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   844
    "MIGYMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2Nv"
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   845
    "dHRzZGFsZTElMCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjE7"
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   846
    "MDkGA1UEAxMyU3RhcmZpZWxkIFNlcnZpY2VzIFJvb3QgQ2VydGlmaWNhdGUgQXV0"
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   847
    "aG9yaXR5IC0gRzI=",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   848
    "AA==",
abf765aee76c4289cdbe9014e6efb70fb893f205 bug 1303383 - enable 5 Amazon root CAs for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 331952
diff changeset
   849
  },
332225
b965dafca0897e319facd899358537be440fbcc9 bug 1307984 - enable "LuxTrust Global Root 2" for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 332075
diff changeset
   850
  {
b965dafca0897e319facd899358537be440fbcc9 bug 1307984 - enable "LuxTrust Global Root 2" for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 332075
diff changeset
   851
    // CN=LuxTrust Global Root 2,O=LuxTrust S.A.,C=LU
b965dafca0897e319facd899358537be440fbcc9 bug 1307984 - enable "LuxTrust Global Root 2" for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 332075
diff changeset
   852
    "1.3.171.1.1.10.5.2",
b965dafca0897e319facd899358537be440fbcc9 bug 1307984 - enable "LuxTrust Global Root 2" for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 332075
diff changeset
   853
    "LuxTrust EV OID",
b965dafca0897e319facd899358537be440fbcc9 bug 1307984 - enable "LuxTrust Global Root 2" for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 332075
diff changeset
   854
    { 0x54, 0x45, 0x5F, 0x71, 0x29, 0xC2, 0x0B, 0x14, 0x47, 0xC4, 0x18,
b965dafca0897e319facd899358537be440fbcc9 bug 1307984 - enable "LuxTrust Global Root 2" for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 332075
diff changeset
   855
      0xF9, 0x97, 0x16, 0x8F, 0x24, 0xC5, 0x8F, 0xC5, 0x02, 0x3B, 0xF5,
b965dafca0897e319facd899358537be440fbcc9 bug 1307984 - enable "LuxTrust Global Root 2" for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 332075
diff changeset
   856
      0xDA, 0x5B, 0xE2, 0xEB, 0x6E, 0x1D, 0xD8, 0x90, 0x2E, 0xD5 },
b965dafca0897e319facd899358537be440fbcc9 bug 1307984 - enable "LuxTrust Global Root 2" for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 332075
diff changeset
   857
    "MEYxCzAJBgNVBAYTAkxVMRYwFAYDVQQKDA1MdXhUcnVzdCBTLkEuMR8wHQYDVQQD"
b965dafca0897e319facd899358537be440fbcc9 bug 1307984 - enable "LuxTrust Global Root 2" for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 332075
diff changeset
   858
    "DBZMdXhUcnVzdCBHbG9iYWwgUm9vdCAy",
b965dafca0897e319facd899358537be440fbcc9 bug 1307984 - enable "LuxTrust Global Root 2" for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 332075
diff changeset
   859
    "Cn6m30tEntpqJIWe5rgV0xZ/u7E=",
b965dafca0897e319facd899358537be440fbcc9 bug 1307984 - enable "LuxTrust Global Root 2" for EV r=jcj
David Keeler <dkeeler@mozilla.com>
parents: 332075
diff changeset
   860
  },
406578
9bb3ef4fd027d0354055de0bf33514bdad5ac76d bug 1385065 - enable GDCA TrustAUTH R5 ROOT certificate for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 402116
diff changeset
   861
  {
9bb3ef4fd027d0354055de0bf33514bdad5ac76d bug 1385065 - enable GDCA TrustAUTH R5 ROOT certificate for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 402116
diff changeset
   862
    // CN=GDCA TrustAUTH R5 ROOT,O="GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.",C=CN
9bb3ef4fd027d0354055de0bf33514bdad5ac76d bug 1385065 - enable GDCA TrustAUTH R5 ROOT certificate for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 402116
diff changeset
   863
    "1.2.156.112559.1.1.6.1",
9bb3ef4fd027d0354055de0bf33514bdad5ac76d bug 1385065 - enable GDCA TrustAUTH R5 ROOT certificate for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 402116
diff changeset
   864
    "GDCA EV OID",
9bb3ef4fd027d0354055de0bf33514bdad5ac76d bug 1385065 - enable GDCA TrustAUTH R5 ROOT certificate for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 402116
diff changeset
   865
    { 0xBF, 0xFF, 0x8F, 0xD0, 0x44, 0x33, 0x48, 0x7D, 0x6A, 0x8A, 0xA6,
9bb3ef4fd027d0354055de0bf33514bdad5ac76d bug 1385065 - enable GDCA TrustAUTH R5 ROOT certificate for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 402116
diff changeset
   866
      0x0C, 0x1A, 0x29, 0x76, 0x7A, 0x9F, 0xC2, 0xBB, 0xB0, 0x5E, 0x42,
9bb3ef4fd027d0354055de0bf33514bdad5ac76d bug 1385065 - enable GDCA TrustAUTH R5 ROOT certificate for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 402116
diff changeset
   867
      0x0F, 0x71, 0x3A, 0x13, 0xB9, 0x92, 0x89, 0x1D, 0x38, 0x93 },
9bb3ef4fd027d0354055de0bf33514bdad5ac76d bug 1385065 - enable GDCA TrustAUTH R5 ROOT certificate for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 402116
diff changeset
   868
    "MGIxCzAJBgNVBAYTAkNOMTIwMAYDVQQKDClHVUFORyBET05HIENFUlRJRklDQVRF"
9bb3ef4fd027d0354055de0bf33514bdad5ac76d bug 1385065 - enable GDCA TrustAUTH R5 ROOT certificate for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 402116
diff changeset
   869
    "IEFVVEhPUklUWSBDTy4sTFRELjEfMB0GA1UEAwwWR0RDQSBUcnVzdEFVVEggUjUg"
9bb3ef4fd027d0354055de0bf33514bdad5ac76d bug 1385065 - enable GDCA TrustAUTH R5 ROOT certificate for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 402116
diff changeset
   870
    "Uk9PVA==",
9bb3ef4fd027d0354055de0bf33514bdad5ac76d bug 1385065 - enable GDCA TrustAUTH R5 ROOT certificate for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 402116
diff changeset
   871
    "fQmX/vBH6no=",
9bb3ef4fd027d0354055de0bf33514bdad5ac76d bug 1385065 - enable GDCA TrustAUTH R5 ROOT certificate for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 402116
diff changeset
   872
  },
406942
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   873
  {
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   874
    // CN=SSL.com EV Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   875
    "2.23.140.1.1",
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   876
    "CA/Browser Forum EV OID",
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   877
    { 0x22, 0xA2, 0xC1, 0xF7, 0xBD, 0xED, 0x70, 0x4C, 0xC1, 0xE7, 0x01,
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   878
      0xB5, 0xF4, 0x08, 0xC3, 0x10, 0x88, 0x0F, 0xE9, 0x56, 0xB5, 0xDE,
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   879
      0x2A, 0x4A, 0x44, 0xF9, 0x9C, 0x87, 0x3A, 0x25, 0xA7, 0xC8 },
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   880
    "MH8xCzAJBgNVBAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4GA1UEBwwHSG91c3Rv"
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   881
    "bjEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMTQwMgYDVQQDDCtTU0wuY29tIEVW"
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   882
    "IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgRUND",
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   883
    "LCmcWxbtBZU=",
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   884
  },
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   885
  {
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   886
    // CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   887
    "2.23.140.1.1",
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   888
    "CA/Browser Forum EV OID",
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   889
    { 0x2E, 0x7B, 0xF1, 0x6C, 0xC2, 0x24, 0x85, 0xA7, 0xBB, 0xE2, 0xAA,
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   890
      0x86, 0x96, 0x75, 0x07, 0x61, 0xB0, 0xAE, 0x39, 0xBE, 0x3B, 0x2F,
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   891
      0xE9, 0xD0, 0xCC, 0x6D, 0x4E, 0xF7, 0x34, 0x91, 0x42, 0x5C },
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   892
    "MIGCMQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0"
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   893
    "b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjE3MDUGA1UEAwwuU1NMLmNvbSBF"
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   894
    "ViBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IFJTQSBSMg==",
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   895
    "VrYpzTS8ePY=",
fae1a70a8a12fdb50167e7c97f10b87086bc78f3 bug 1410956 - enable SSL.com EV root certificates for EV in PSM r=fkiefer
David Keeler <dkeeler@mozilla.com>
parents: 406578
diff changeset
   896
  },
450339
bde7618ae76524b36cfa8ede3e3819cf99d9d968 bug 1496215 - Enable EV Treatment for UCA Extended Validation Root owned by SHECA r=jcj
Dana Keeler <dkeeler@mozilla.com>
parents: 448947
diff changeset
   897
  {
bde7618ae76524b36cfa8ede3e3819cf99d9d968 bug 1496215 - Enable EV Treatment for UCA Extended Validation Root owned by SHECA r=jcj
Dana Keeler <dkeeler@mozilla.com>
parents: 448947
diff changeset
   898
    // CN=UCA Extended Validation Root,O=UniTrust,C=CN
bde7618ae76524b36cfa8ede3e3819cf99d9d968 bug 1496215 - Enable EV Treatment for UCA Extended Validation Root owned by SHECA r=jcj
Dana Keeler <dkeeler@mozilla.com>
parents: 448947
diff changeset
   899
    "2.23.140.1.1",
bde7618ae76524b36cfa8ede3e3819cf99d9d968 bug 1496215 - Enable EV Treatment for UCA Extended Validation Root owned by SHECA r=jcj
Dana Keeler <dkeeler@mozilla.com>
parents: 448947
diff changeset
   900
    "CA/Browser Forum EV OID",
bde7618ae76524b36cfa8ede3e3819cf99d9d968 bug 1496215 - Enable EV Treatment for UCA Extended Validation Root owned by SHECA r=jcj
Dana Keeler <dkeeler@mozilla.com>
parents: 448947
diff changeset
   901
    { 0xD4, 0x3A, 0xF9, 0xB3, 0x54, 0x73, 0x75, 0x5C, 0x96, 0x84, 0xFC,
bde7618ae76524b36cfa8ede3e3819cf99d9d968 bug 1496215 - Enable EV Treatment for UCA Extended Validation Root owned by SHECA r=jcj
Dana Keeler <dkeeler@mozilla.com>
parents: 448947
diff changeset
   902
      0x06, 0xD7, 0xD8, 0xCB, 0x70, 0xEE, 0x5C, 0x28, 0xE7, 0x73, 0xFB,
bde7618ae76524b36cfa8ede3e3819cf99d9d968 bug 1496215 - Enable EV Treatment for UCA Extended Validation Root owned by SHECA r=jcj
Dana Keeler <dkeeler@mozilla.com>
parents: 448947
diff changeset
   903
      0x29, 0x4E, 0xB4, 0x1E, 0xE7, 0x17, 0x22, 0x92, 0x4D, 0x24 },
bde7618ae76524b36cfa8ede3e3819cf99d9d968 bug 1496215 - Enable EV Treatment for UCA Extended Validation Root owned by SHECA r=jcj
Dana Keeler <dkeeler@mozilla.com>
parents: 448947
diff changeset
   904
    "MEcxCzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDElMCMGA1UEAwwcVUNB"
bde7618ae76524b36cfa8ede3e3819cf99d9d968 bug 1496215 - Enable EV Treatment for UCA Extended Validation Root owned by SHECA r=jcj
Dana Keeler <dkeeler@mozilla.com>
parents: 448947
diff changeset
   905
    "IEV4dGVuZGVkIFZhbGlkYXRpb24gUm9vdA==",
bde7618ae76524b36cfa8ede3e3819cf99d9d968 bug 1496215 - Enable EV Treatment for UCA Extended Validation Root owned by SHECA r=jcj
Dana Keeler <dkeeler@mozilla.com>
parents: 448947
diff changeset
   906
    "T9Irj/VkyDOeTzRYZiNwYA==",
bde7618ae76524b36cfa8ede3e3819cf99d9d968 bug 1496215 - Enable EV Treatment for UCA Extended Validation Root owned by SHECA r=jcj
Dana Keeler <dkeeler@mozilla.com>
parents: 448947
diff changeset
   907
  },
470697
4ec3f8bab9f32fbcbe04dfda2aa32f8a59389d37 Bug 1532757 - Enable EV Treatment for Hongkong Post Root CA 3 root certificate r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 450339
diff changeset
   908
  {
4ec3f8bab9f32fbcbe04dfda2aa32f8a59389d37 Bug 1532757 - Enable EV Treatment for Hongkong Post Root CA 3 root certificate r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 450339
diff changeset
   909
    // CN=Hongkong Post Root CA 3,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK
4ec3f8bab9f32fbcbe04dfda2aa32f8a59389d37 Bug 1532757 - Enable EV Treatment for Hongkong Post Root CA 3 root certificate r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 450339
diff changeset
   910
    "2.23.140.1.1",
4ec3f8bab9f32fbcbe04dfda2aa32f8a59389d37 Bug 1532757 - Enable EV Treatment for Hongkong Post Root CA 3 root certificate r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 450339
diff changeset
   911
    "CA/Browser Forum EV OID",
4ec3f8bab9f32fbcbe04dfda2aa32f8a59389d37 Bug 1532757 - Enable EV Treatment for Hongkong Post Root CA 3 root certificate r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 450339
diff changeset
   912
    { 0x5A, 0x2F, 0xC0, 0x3F, 0x0C, 0x83, 0xB0, 0x90, 0xBB, 0xFA, 0x40,
4ec3f8bab9f32fbcbe04dfda2aa32f8a59389d37 Bug 1532757 - Enable EV Treatment for Hongkong Post Root CA 3 root certificate r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 450339
diff changeset
   913
      0x60, 0x4B, 0x09, 0x88, 0x44, 0x6C, 0x76, 0x36, 0x18, 0x3D, 0xF9,
4ec3f8bab9f32fbcbe04dfda2aa32f8a59389d37 Bug 1532757 - Enable EV Treatment for Hongkong Post Root CA 3 root certificate r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 450339
diff changeset
   914
      0x84, 0x6E, 0x17, 0x10, 0x1A, 0x44, 0x7F, 0xB8, 0xEF, 0xD6 },
4ec3f8bab9f32fbcbe04dfda2aa32f8a59389d37 Bug 1532757 - Enable EV Treatment for Hongkong Post Root CA 3 root certificate r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 450339
diff changeset
   915
    "MG8xCzAJBgNVBAYTAkhLMRIwEAYDVQQIEwlIb25nIEtvbmcxEjAQBgNVBAcTCUhv"
4ec3f8bab9f32fbcbe04dfda2aa32f8a59389d37 Bug 1532757 - Enable EV Treatment for Hongkong Post Root CA 3 root certificate r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 450339
diff changeset
   916
    "bmcgS29uZzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEgMB4GA1UEAxMXSG9uZ2tv"
4ec3f8bab9f32fbcbe04dfda2aa32f8a59389d37 Bug 1532757 - Enable EV Treatment for Hongkong Post Root CA 3 root certificate r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 450339
diff changeset
   917
    "bmcgUG9zdCBSb290IENBIDM=",
4ec3f8bab9f32fbcbe04dfda2aa32f8a59389d37 Bug 1532757 - Enable EV Treatment for Hongkong Post Root CA 3 root certificate r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 450339
diff changeset
   918
    "CBZfikyl7ADJk0DfxMauI7gcWqQ=",
4ec3f8bab9f32fbcbe04dfda2aa32f8a59389d37 Bug 1532757 - Enable EV Treatment for Hongkong Post Root CA 3 root certificate r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 450339
diff changeset
   919
  },
471349
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   920
  {
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   921
    // CN=emSign Root CA - G1,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   922
    "2.23.140.1.1",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   923
    "CA/Browser Forum EV OID",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   924
    { 0x40, 0xF6, 0xAF, 0x03, 0x46, 0xA9, 0x9A, 0xA1, 0xCD, 0x1D, 0x55,
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   925
      0x5A, 0x4E, 0x9C, 0xCE, 0x62, 0xC7, 0xF9, 0x63, 0x46, 0x03, 0xEE,
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   926
      0x40, 0x66, 0x15, 0x83, 0x3D, 0xC8, 0xC8, 0xD0, 0x03, 0x67 },
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   927
    "MGcxCzAJBgNVBAYTAklOMRMwEQYDVQQLEwplbVNpZ24gUEtJMSUwIwYDVQQKExxl"
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   928
    "TXVkaHJhIFRlY2hub2xvZ2llcyBMaW1pdGVkMRwwGgYDVQQDExNlbVNpZ24gUm9v"
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   929
    "dCBDQSAtIEcx",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   930
    "MfXkYgxsWO3W2A==",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   931
  },
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   932
  {
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   933
    // CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   934
    "2.23.140.1.1",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   935
    "CA/Browser Forum EV OID",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   936
    { 0x86, 0xA1, 0xEC, 0xBA, 0x08, 0x9C, 0x4A, 0x8D, 0x3B, 0xBE, 0x27,
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   937
      0x34, 0xC6, 0x12, 0xBA, 0x34, 0x1D, 0x81, 0x3E, 0x04, 0x3C, 0xF9,
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   938
      0xE8, 0xA8, 0x62, 0xCD, 0x5C, 0x57, 0xA3, 0x6B, 0xBE, 0x6B },
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   939
    "MGsxCzAJBgNVBAYTAklOMRMwEQYDVQQLEwplbVNpZ24gUEtJMSUwIwYDVQQKExxl"
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   940
    "TXVkaHJhIFRlY2hub2xvZ2llcyBMaW1pdGVkMSAwHgYDVQQDExdlbVNpZ24gRUND"
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   941
    "IFJvb3QgQ0EgLSBHMw==",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   942
    "PPYHqWhwDtqLhA==",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   943
  },
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   944
  {
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   945
    // CN=emSign Root CA - C1,O=eMudhra Inc,OU=emSign PKI,C=US
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   946
    "2.23.140.1.1",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   947
    "CA/Browser Forum EV OID",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   948
    { 0x12, 0x56, 0x09, 0xAA, 0x30, 0x1D, 0xA0, 0xA2, 0x49, 0xB9, 0x7A,
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   949
      0x82, 0x39, 0xCB, 0x6A, 0x34, 0x21, 0x6F, 0x44, 0xDC, 0xAC, 0x9F,
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   950
      0x39, 0x54, 0xB1, 0x42, 0x92, 0xF2, 0xE8, 0xC8, 0x60, 0x8F },
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   951
    "MFYxCzAJBgNVBAYTAlVTMRMwEQYDVQQLEwplbVNpZ24gUEtJMRQwEgYDVQQKEwtl"
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   952
    "TXVkaHJhIEluYzEcMBoGA1UEAxMTZW1TaWduIFJvb3QgQ0EgLSBDMQ==",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   953
    "AK7PALrEzzL4Q7I=",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   954
    },
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   955
  {
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   956
    // CN=emSign ECC Root CA - C3,O=eMudhra Inc,OU=emSign PKI,C=US
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   957
    "2.23.140.1.1",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   958
    "CA/Browser Forum EV OID",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   959
    { 0xBC, 0x4D, 0x80, 0x9B, 0x15, 0x18, 0x9D, 0x78, 0xDB, 0x3E, 0x1D,
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   960
      0x8C, 0xF4, 0xF9, 0x72, 0x6A, 0x79, 0x5D, 0xA1, 0x64, 0x3C, 0xA5,
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   961
      0xF1, 0x35, 0x8E, 0x1D, 0xDB, 0x0E, 0xDC, 0x0D, 0x7E, 0xB3 },
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   962
    "MFoxCzAJBgNVBAYTAlVTMRMwEQYDVQQLEwplbVNpZ24gUEtJMRQwEgYDVQQKEwtl"
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   963
    "TXVkaHJhIEluYzEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0gQzM=",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   964
    "e3G2gla4EnycqA==",
80374044414da9f5b3634c91345d07612754fcda Bug 1515465 - Enable EV Treatment for eMudhra Technologies Limited root certificates r=keeler
Kevin Jacobs <kjacobs@mozilla.com>
parents: 470697
diff changeset
   965
  },
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
   966
    // clang-format on
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   967
};
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   968
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
   969
static SECOidTag sEVInfoOIDTags[ArrayLength(kEVInfos)];
343456
efe205d42f032af5e95b0f6372a7f3d44fc6117e Bug 1335632 - Split out the const and mutable parts of myTrustedEVInfos. r=keeler
David Major <dmajor@mozilla.com>
parents: 342478
diff changeset
   970
efe205d42f032af5e95b0f6372a7f3d44fc6117e Bug 1335632 - Split out the const and mutable parts of myTrustedEVInfos. r=keeler
David Major <dmajor@mozilla.com>
parents: 342478
diff changeset
   971
static_assert(SEC_OID_UNKNOWN == 0,
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
   972
              "We depend on zero-initialized globals being interpreted as "
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
   973
              "SEC_OID_UNKNOWN.");
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
   974
static_assert(
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
   975
    ArrayLength(sEVInfoOIDTags) == ArrayLength(kEVInfos),
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
   976
    "These arrays are used in parallel and must have the same length.");
343456
efe205d42f032af5e95b0f6372a7f3d44fc6117e Bug 1335632 - Split out the const and mutable parts of myTrustedEVInfos. r=keeler
David Major <dmajor@mozilla.com>
parents: 342478
diff changeset
   977
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
   978
static SECOidTag RegisterOID(const SECItem& oidItem, const char* oidName) {
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   979
  SECOidData od;
309425
a1bcaa3640e51d8ab2b24faf7d28933ab6b33b37 Bug 1294011 - Obviate manual calls to SECITEM_FreeItem() in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 308920
diff changeset
   980
  od.oid.len = oidItem.len;
a1bcaa3640e51d8ab2b24faf7d28933ab6b33b37 Bug 1294011 - Obviate manual calls to SECITEM_FreeItem() in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 308920
diff changeset
   981
  od.oid.data = oidItem.data;
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   982
  od.offset = SEC_OID_UNKNOWN;
309425
a1bcaa3640e51d8ab2b24faf7d28933ab6b33b37 Bug 1294011 - Obviate manual calls to SECITEM_FreeItem() in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 308920
diff changeset
   983
  od.desc = oidName;
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   984
  od.mechanism = CKM_INVALID_MECHANISM;
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   985
  od.supportedExtension = INVALID_CERT_EXTENSION;
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   986
  return SECOID_AddEntry(&od);
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   987
}
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   988
316027
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
   989
static SECOidTag sCABForumEVOIDTag = SEC_OID_UNKNOWN;
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
   990
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
   991
static bool isEVPolicy(SECOidTag policyOIDTag) {
316027
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
   992
  if (policyOIDTag != SEC_OID_UNKNOWN && policyOIDTag == sCABForumEVOIDTag) {
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
   993
    return true;
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
   994
  }
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
   995
343456
efe205d42f032af5e95b0f6372a7f3d44fc6117e Bug 1335632 - Split out the const and mutable parts of myTrustedEVInfos. r=keeler
David Major <dmajor@mozilla.com>
parents: 342478
diff changeset
   996
  for (const SECOidTag& oidTag : sEVInfoOIDTags) {
efe205d42f032af5e95b0f6372a7f3d44fc6117e Bug 1335632 - Split out the const and mutable parts of myTrustedEVInfos. r=keeler
David Major <dmajor@mozilla.com>
parents: 342478
diff changeset
   997
    if (policyOIDTag == oidTag) {
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   998
      return true;
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
   999
    }
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1000
  }
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1001
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1002
  return false;
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1003
}
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1004
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1005
bool CertIsAuthoritativeForEVPolicy(const UniqueCERTCertificate& cert,
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1006
                                    const mozilla::pkix::CertPolicyId& policy) {
328037
9957c63c664df44054c7930a5632ba9e07af3f55 Bug 1325107 - Stop using PR_ASSERT() in PSM. r=mgoodwin
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 327095
diff changeset
  1007
  MOZ_ASSERT(cert);
183490
a4ae7060f43ac1a4e49b30dfd7a95c5212940d4b Bug 1006958: Use mozilla::pkix::der to parse certificate policies instead of NSS, r=keeler
Brian Smith <brian@briansmith.org>
parents: 174647
diff changeset
  1008
  if (!cert) {
170833
b7030189c2ca5697c8fba43220511ddc39fcce98 Bug 921885: Use insanity::pkix for EV cert verification when insanity::pkix is the selected implementation, r=cviecco, r=keeler
Brian Smith <brian@briansmith.org>
parents: 166689
diff changeset
  1009
    return false;
b7030189c2ca5697c8fba43220511ddc39fcce98 Bug 921885: Use insanity::pkix for EV cert verification when insanity::pkix is the selected implementation, r=cviecco, r=keeler
Brian Smith <brian@briansmith.org>
parents: 166689
diff changeset
  1010
  }
b7030189c2ca5697c8fba43220511ddc39fcce98 Bug 921885: Use insanity::pkix for EV cert verification when insanity::pkix is the selected implementation, r=cviecco, r=keeler
Brian Smith <brian@briansmith.org>
parents: 166689
diff changeset
  1011
316863
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1012
  unsigned char fingerprint[SHA256_LENGTH];
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1013
  SECStatus srv = PK11_HashBuf(SEC_OID_SHA256, fingerprint, cert->derCert.data,
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1014
                               AssertedCast<int32_t>(cert->derCert.len));
316863
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1015
  if (srv != SECSuccess) {
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1016
    return false;
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1017
  }
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1018
316027
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
  1019
  const SECOidData* cabforumOIDData = SECOID_FindOIDByTag(sCABForumEVOIDTag);
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
  1020
  for (size_t i = 0; i < ArrayLength(kEVInfos); ++i) {
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
  1021
    const EVInfo& entry = kEVInfos[i];
343456
efe205d42f032af5e95b0f6372a7f3d44fc6117e Bug 1335632 - Split out the const and mutable parts of myTrustedEVInfos. r=keeler
David Major <dmajor@mozilla.com>
parents: 342478
diff changeset
  1022
316863
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1023
    // This check ensures that only the specific roots we approve for EV get
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1024
    // that status, and not certs (roots or otherwise) that happen to have an
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1025
    // OID that's already been approved for EV.
428836
cffca1854a032479d908982f97f88a4c18cb6015 Bug 1470985 - s/PodEqual/ArrayEqual/ from ArrayUtils.h. - r=waldo
Jeff Gilbert <jgilbert@mozilla.com>
parents: 406942
diff changeset
  1026
    if (!ArrayEqual(fingerprint, entry.sha256Fingerprint)) {
316863
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1027
      continue;
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1028
    }
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1029
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1030
    if (cabforumOIDData && cabforumOIDData->oid.len == policy.numBytes &&
428836
cffca1854a032479d908982f97f88a4c18cb6015 Bug 1470985 - s/PodEqual/ArrayEqual/ from ArrayUtils.h. - r=waldo
Jeff Gilbert <jgilbert@mozilla.com>
parents: 406942
diff changeset
  1031
        ArrayEqual(cabforumOIDData->oid.data, policy.bytes, policy.numBytes)) {
316863
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1032
      return true;
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1033
    }
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
  1034
    const SECOidData* oidData = SECOID_FindOIDByTag(sEVInfoOIDTags[i]);
316863
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1035
    if (oidData && oidData->oid.len == policy.numBytes &&
428836
cffca1854a032479d908982f97f88a4c18cb6015 Bug 1470985 - s/PodEqual/ArrayEqual/ from ArrayUtils.h. - r=waldo
Jeff Gilbert <jgilbert@mozilla.com>
parents: 406942
diff changeset
  1036
        ArrayEqual(oidData->oid.data, policy.bytes, policy.numBytes)) {
316863
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1037
      return true;
170833
b7030189c2ca5697c8fba43220511ddc39fcce98 Bug 921885: Use insanity::pkix for EV cert verification when insanity::pkix is the selected implementation, r=cviecco, r=keeler
Brian Smith <brian@briansmith.org>
parents: 166689
diff changeset
  1038
    }
b7030189c2ca5697c8fba43220511ddc39fcce98 Bug 921885: Use insanity::pkix for EV cert verification when insanity::pkix is the selected implementation, r=cviecco, r=keeler
Brian Smith <brian@briansmith.org>
parents: 166689
diff changeset
  1039
  }
b7030189c2ca5697c8fba43220511ddc39fcce98 Bug 921885: Use insanity::pkix for EV cert verification when insanity::pkix is the selected implementation, r=cviecco, r=keeler
Brian Smith <brian@briansmith.org>
parents: 166689
diff changeset
  1040
b7030189c2ca5697c8fba43220511ddc39fcce98 Bug 921885: Use insanity::pkix for EV cert verification when insanity::pkix is the selected implementation, r=cviecco, r=keeler
Brian Smith <brian@briansmith.org>
parents: 166689
diff changeset
  1041
  return false;
b7030189c2ca5697c8fba43220511ddc39fcce98 Bug 921885: Use insanity::pkix for EV cert verification when insanity::pkix is the selected implementation, r=cviecco, r=keeler
Brian Smith <brian@briansmith.org>
parents: 166689
diff changeset
  1042
}
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1043
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1044
nsresult LoadExtendedValidationInfo() {
316027
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
  1045
  static const char* sCABForumOIDString = "2.23.140.1.1";
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
  1046
  static const char* sCABForumOIDDescription = "CA/Browser Forum EV OID";
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
  1047
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
  1048
  ScopedAutoSECItem cabforumOIDItem;
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1049
  if (SEC_StringToOID(nullptr, &cabforumOIDItem, sCABForumOIDString, 0) !=
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1050
      SECSuccess) {
319180
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1051
    return NS_ERROR_FAILURE;
316027
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
  1052
  }
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
  1053
  sCABForumEVOIDTag = RegisterOID(cabforumOIDItem, sCABForumOIDDescription);
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
  1054
  if (sCABForumEVOIDTag == SEC_OID_UNKNOWN) {
319180
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1055
    return NS_ERROR_FAILURE;
316027
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
  1056
  }
5a94cba4c1a1c4712bb9115228b1fbb9892b77b2 bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
David Keeler <dkeeler@mozilla.com>
parents: 313437
diff changeset
  1057
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
  1058
  for (size_t i = 0; i < ArrayLength(kEVInfos); ++i) {
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
  1059
    const EVInfo& entry = kEVInfos[i];
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1060
319180
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1061
    SECStatus srv;
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1062
#ifdef DEBUG
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1063
    // This section of code double-checks that we calculated the correct
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1064
    // certificate hash given the issuer and serial number and that it is
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1065
    // actually present in our loaded root certificates module. It is
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1066
    // unnecessary to check this in non-debug builds since we will safely fall
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1067
    // back to DV if the EV information is incorrect.
348263
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
  1068
    nsAutoCString derIssuer;
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1069
    nsresult rv =
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1070
        Base64Decode(nsDependentCString(entry.issuerBase64), derIssuer);
348263
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
  1071
    MOZ_ASSERT(NS_SUCCEEDED(rv), "Could not base64-decode built-in EV issuer");
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
  1072
    if (NS_FAILED(rv)) {
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
  1073
      return rv;
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1074
    }
309425
a1bcaa3640e51d8ab2b24faf7d28933ab6b33b37 Bug 1294011 - Obviate manual calls to SECITEM_FreeItem() in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 308920
diff changeset
  1075
348263
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
  1076
    nsAutoCString serialNumber;
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
  1077
    rv = Base64Decode(nsDependentCString(entry.serialBase64), serialNumber);
348263
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
  1078
    MOZ_ASSERT(NS_SUCCEEDED(rv), "Could not base64-decode built-in EV serial");
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
  1079
    if (NS_FAILED(rv)) {
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
  1080
      return rv;
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1081
    }
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1082
309425
a1bcaa3640e51d8ab2b24faf7d28933ab6b33b37 Bug 1294011 - Obviate manual calls to SECITEM_FreeItem() in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 308920
diff changeset
  1083
    CERTIssuerAndSN ias;
348263
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
  1084
    ias.derIssuer.data =
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1085
        BitwiseCast<unsigned char*, const char*>(derIssuer.get());
348263
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
  1086
    ias.derIssuer.len = derIssuer.Length();
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
  1087
    ias.serialNumber.data =
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1088
        BitwiseCast<unsigned char*, const char*>(serialNumber.get());
348263
312bdabd35b80e14c52893f72915531e334017a3 Bug 1338897 - Avoid using NSS Base64 functions in PSM. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 343456
diff changeset
  1089
    ias.serialNumber.len = serialNumber.Length();
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1090
    ias.serialNumber.type = siUnsignedInteger;
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1091
316863
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1092
    UniqueCERTCertificate cert(CERT_FindCertByIssuerAndSN(nullptr, &ias));
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1093
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1094
    // If an entry is missing in the NSS root database, it may be because the
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1095
    // root database is out of sync with what we expect (e.g. a different
319180
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1096
    // version of system NSS is installed).
316863
2f033b5b7fd6eaff5cc7a6e5209e52f0a77ee607 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 316027
diff changeset
  1097
    if (!cert) {
319180
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1098
      // The entries for the debug EV roots are at indices 0 through
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1099
      // NUM_TEST_EV_ROOTS - 1. Since they're not built-in, they probably
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1100
      // haven't been loaded yet.
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
  1101
      MOZ_ASSERT(i < NUM_TEST_EV_ROOTS, "Could not find built-in EV root");
319180
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1102
    } else {
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1103
      unsigned char certFingerprint[SHA256_LENGTH];
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1104
      srv = PK11_HashBuf(SEC_OID_SHA256, certFingerprint, cert->derCert.data,
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1105
                         AssertedCast<int32_t>(cert->derCert.len));
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1106
      MOZ_ASSERT(srv == SECSuccess, "Could not hash EV root");
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1107
      if (srv != SECSuccess) {
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1108
        return NS_ERROR_FAILURE;
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1109
      }
428836
cffca1854a032479d908982f97f88a4c18cb6015 Bug 1470985 - s/PodEqual/ArrayEqual/ from ArrayUtils.h. - r=waldo
Jeff Gilbert <jgilbert@mozilla.com>
parents: 406942
diff changeset
  1110
      bool same = ArrayEqual(certFingerprint, entry.sha256Fingerprint);
319180
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1111
      MOZ_ASSERT(same, "EV root fingerprint mismatch");
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1112
      if (!same) {
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1113
        return NS_ERROR_FAILURE;
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1114
      }
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1115
    }
319180
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1116
#endif
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1117
    // This is the code that actually enables these roots for EV.
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
  1118
    ScopedAutoSECItem evOIDItem;
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
  1119
    srv = SEC_StringToOID(nullptr, &evOIDItem, entry.dottedOid, 0);
319180
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1120
    MOZ_ASSERT(srv == SECSuccess, "SEC_StringToOID failed");
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1121
    if (srv != SECSuccess) {
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1122
      return NS_ERROR_FAILURE;
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1123
    }
357389
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
  1124
    sEVInfoOIDTags[i] = RegisterOID(evOIDItem, entry.oidName);
d0b06894933dddf6ecb4a46b88e2065806a860e3 Bug 1308143 - Clean up ExtendedValidation.cpp. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 352715
diff changeset
  1125
    if (sEVInfoOIDTags[i] == SEC_OID_UNKNOWN) {
319180
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1126
      return NS_ERROR_FAILURE;
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1127
    }
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1128
  }
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1129
319180
6810346363585085e260d47a58cf5b7d58542d44 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
David Keeler <dkeeler@mozilla.com>
parents: 318265
diff changeset
  1130
  return NS_OK;
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1131
}
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1132
325933
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1133
// Helper function for GetFirstEVPolicy(): returns the first suitable policy
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1134
// from the given list of policies.
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1135
bool GetFirstEVPolicyFromPolicyList(
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1136
    const UniqueCERTCertificatePolicies& policies,
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1137
    /*out*/ mozilla::pkix::CertPolicyId& policy,
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1138
    /*out*/ SECOidTag& policyOidTag) {
325933
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1139
  for (size_t i = 0; policies->policyInfos[i]; i++) {
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1140
    const CERTPolicyInfo* policyInfo = policies->policyInfos[i];
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1141
    SECOidTag policyInfoOID = policyInfo->oid;
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1142
    if (policyInfoOID == SEC_OID_UNKNOWN || !isEVPolicy(policyInfoOID)) {
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1143
      continue;
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1144
    }
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1145
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1146
    const SECOidData* oidData = SECOID_FindOIDByTag(policyInfoOID);
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1147
    MOZ_ASSERT(oidData);
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1148
    MOZ_ASSERT(oidData->oid.data);
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1149
    MOZ_ASSERT(oidData->oid.len > 0);
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1150
    MOZ_ASSERT(oidData->oid.len <= mozilla::pkix::CertPolicyId::MAX_BYTES);
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1151
    if (!oidData || !oidData->oid.data || oidData->oid.len == 0 ||
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1152
        oidData->oid.len > mozilla::pkix::CertPolicyId::MAX_BYTES) {
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1153
      continue;
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1154
    }
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1155
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1156
    policy.numBytes = AssertedCast<uint16_t>(oidData->oid.len);
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1157
    PodCopy(policy.bytes, oidData->oid.data, policy.numBytes);
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1158
    policyOidTag = policyInfoOID;
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1159
    return true;
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1160
  }
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1161
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1162
  return false;
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1163
}
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1164
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1165
bool GetFirstEVPolicy(CERTCertificate& cert,
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1166
                      /*out*/ mozilla::pkix::CertPolicyId& policy,
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1167
                      /*out*/ SECOidTag& policyOidTag) {
325933
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1168
  if (!cert.extensions) {
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1169
    return false;
183490
a4ae7060f43ac1a4e49b30dfd7a95c5212940d4b Bug 1006958: Use mozilla::pkix::der to parse certificate policies instead of NSS, r=keeler
Brian Smith <brian@briansmith.org>
parents: 174647
diff changeset
  1170
  }
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1171
325933
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1172
  for (size_t i = 0; cert.extensions[i]; i++) {
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1173
    const CERTCertExtension* extension = cert.extensions[i];
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1174
    if (SECOID_FindOIDTag(&extension->id) !=
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1175
        SEC_OID_X509_CERTIFICATE_POLICIES) {
325933
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1176
      continue;
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1177
    }
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1178
325933
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1179
    UniqueCERTCertificatePolicies policies(
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1180
        CERT_DecodeCertificatePoliciesExtension(&extension->value));
325933
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1181
    if (!policies) {
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1182
      continue;
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1183
    }
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1184
325933
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1185
    if (GetFirstEVPolicyFromPolicyList(policies, policy, policyOidTag)) {
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1186
      return true;
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1187
    }
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1188
  }
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1189
325933
676ca54f13dbfbab36e40b1bbc0e42416c6a3ea8 Bug 1313715 - Avoid unnecessary uses of PR_SetError() under security/apps/ and security/certverifier/. r=keeler
Cykesiopka <cykesiopka.bmo@gmail.com>
parents: 322788
diff changeset
  1190
  return false;
165286
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1191
}
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
Brian Smith <brian@briansmith.org>
parents:
diff changeset
  1192
448947
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1193
}  // namespace psm
6f3709b3878117466168c40affa7bca0b60cf75b Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
Sylvestre Ledru <sledru@mozilla.com>
parents: 448705
diff changeset
  1194
}  // namespace mozilla