Bug 1692094 - Turn off Websites Trust Bit for 'Chambers of Commerce Root - 2008' and 'Global Chambersign Root - 2008'. r=KathleenWilson
☠☠ backed out by fb36733f7980 ☠ ☠
authorBenjamin Beurdouche <bbeurdouche@mozilla.com>
Tue, 23 Feb 2021 08:25:47 +0000 (2021-02-23)
changeset 15856 177c439a30b56a2730f0daa18e7906945a5a14db
parent 15855 3475d86a9d5ec9007b28e6fc7165d3167f743135
child 15857 720a1118f16b60c218a308949554b2d21681c41f
push id3918
push userbbeurdouche@mozilla.com
push dateTue, 23 Feb 2021 08:28:01 +0000 (2021-02-23)
reviewersKathleenWilson
bugs1692094
Bug 1692094 - Turn off Websites Trust Bit for 'Chambers of Commerce Root - 2008' and 'Global Chambersign Root - 2008'. r=KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D105433
lib/ckfw/builtins/certdata.txt
--- a/lib/ckfw/builtins/certdata.txt
+++ b/lib/ckfw/builtins/certdata.txt
@@ -7022,17 +7022,17 @@ CKA_ISSUER MULTILINE_OCTAL
 \141\040\123\056\101\056\061\051\060\047\006\003\125\004\003\023
 \040\103\150\141\155\142\145\162\163\040\157\146\040\103\157\155
 \155\145\162\143\145\040\122\157\157\164\040\055\040\062\060\060
 \070
 END
 CKA_SERIAL_NUMBER MULTILINE_OCTAL
 \002\011\000\243\332\102\176\244\261\256\332
 END
-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
 CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
 
 #
 # Certificate "Global Chambersign Root - 2008"
 #
 # Issuer: CN=Global Chambersign Root - 2008,O=AC Camerfirma S.A.,serialNumber=A82743287,L=Madrid (see current address at www.camerfirma.com/address),C=EU
@@ -7232,17 +7232,17 @@ CKA_ISSUER MULTILINE_OCTAL
 \004\012\023\022\101\103\040\103\141\155\145\162\146\151\162\155
 \141\040\123\056\101\056\061\047\060\045\006\003\125\004\003\023
 \036\107\154\157\142\141\154\040\103\150\141\155\142\145\162\163
 \151\147\156\040\122\157\157\164\040\055\040\062\060\060\070
 END
 CKA_SERIAL_NUMBER MULTILINE_OCTAL
 \002\011\000\311\315\323\351\325\175\043\316
 END
-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
 CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
 
 #
 # Certificate "Go Daddy Root Certificate Authority - G2"
 #
 # Issuer: CN=Go Daddy Root Certificate Authority - G2,O="GoDaddy.com, Inc.",L=Scottsdale,ST=Arizona,C=US