Bug 1692094 - Turn off Websites Trust Bit for 'Chambers of Commerce Root - 2008' and 'Global Chambersign Root - 2008'. r=KathleenWilson
Differential Revision:
https://phabricator.services.mozilla.com/D105433
--- a/lib/ckfw/builtins/certdata.txt
+++ b/lib/ckfw/builtins/certdata.txt
@@ -7022,17 +7022,17 @@ CKA_ISSUER MULTILINE_OCTAL
\141\040\123\056\101\056\061\051\060\047\006\003\125\004\003\023
\040\103\150\141\155\142\145\162\163\040\157\146\040\103\157\155
\155\145\162\143\145\040\122\157\157\164\040\055\040\062\060\060
\070
END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\011\000\243\332\102\176\244\261\256\332
END
-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
#
# Certificate "Global Chambersign Root - 2008"
#
# Issuer: CN=Global Chambersign Root - 2008,O=AC Camerfirma S.A.,serialNumber=A82743287,L=Madrid (see current address at www.camerfirma.com/address),C=EU
@@ -7232,17 +7232,17 @@ CKA_ISSUER MULTILINE_OCTAL
\004\012\023\022\101\103\040\103\141\155\145\162\146\151\162\155
\141\040\123\056\101\056\061\047\060\045\006\003\125\004\003\023
\036\107\154\157\142\141\154\040\103\150\141\155\142\145\162\163
\151\147\156\040\122\157\157\164\040\055\040\062\060\060\070
END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\011\000\311\315\323\351\325\175\043\316
END
-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
#
# Certificate "Go Daddy Root Certificate Authority - G2"
#
# Issuer: CN=Go Daddy Root Certificate Authority - G2,O="GoDaddy.com, Inc.",L=Scottsdale,ST=Arizona,C=US