Re: Pending roots and EV enablements

On 05/23/2009 08:13 PM, Eddy Nigg: On 05/22/2009 07:07 PM, Eddy Nigg: I think Johnathan took care of this too, which is fantastic! Thanks to everybody to make it into the RC, well done! :-) For those wanting to test the roots and EV UI may download the latest build from http://ftp.mozill

Re: Pending roots and EV enablements

On 05/22/2009 07:07 PM, Eddy Nigg: I think Johnathan took care of this too, which is fantastic! Thanks to everybody to make it into the RC, well done! :-) For those wanting to test the roots and EV UI may download the latest build from http://ftp.mozilla.org/pub/mozilla.org/firefox/nightl

Re: Pending roots and EV enablements

On 05/22/2009 06:24 AM, Nelson B Bolyard: However, It appears that the PSM changes, enabling certain root CA certs for EV, have not yet been committed. I hope it's not too late for FF 3.5 RC0. I think Johnathan took care of this too, which is fantastic! Thanks to everybody to make it into

Re: Pending roots and EV enablements

On 05/22/2009 06:24 AM, Nelson B Bolyard: I'm happy to report that the NSS changes were committed today to the source repository from which FF 3.5 will be built. The changes made it in just "under the wire" (at the last moment). I'm thankful to all the people who helped make that happen.

Re: Pending roots and EV enablements

I'm happy to report that the NSS changes were committed today to the source repository from which FF 3.5 will be built. The changes made it in just "under the wire" (at the last moment). I'm thankful to all the people who helped make that happen. However, It appears that the PSM changes, enablin

Re: Pending roots and EV enablements

On May 19, 2009, at 10:23 AM, Nelson B Bolyard wrote: Now, I don't want to set unrealistic expectations, so I must inform you that I have NO idea whether Mozilla Corporation will accept any additional NSS changes at this point or not. Three weeks ago, Bob Relyea and I wrote to MoCo power

Re: Pending roots and EV enablements

On 05/19/2009 09:35 PM, Frank Hecker: Nelson B Bolyard wrote: Now, I don't want to set unrealistic expectations, so I must inform you that I have NO idea whether Mozilla Corporation will accept any additional NSS changes at this point or not. Three weeks ago, Bob Relyea and I wrote to MoCo p

Re: Pending roots and EV enablements

On 05/19/2009 09:35 PM, Frank Hecker: Nelson B Bolyard wrote: Now, I don't want to set unrealistic expectations, so I must inform you that I have NO idea whether Mozilla Corporation will accept any additional NSS changes at this point or not. Three weeks ago, Bob Relyea and I wrote to MoCo p

Re: Pending roots and EV enablements

Nelson Bolyard wrote: I can't see WellsFargo at https://wiki.mozilla.org/CA:Schedule#Requests_in_the_Inclusion_Phase Dunno about that. I consider the bug system authoritative. When Frank or Kathleen creates a bug asking for the work to be done in NSS or PSM, I consider that authoritative, whe

Re: Pending roots and EV enablements

Nelson B Bolyard wrote: Now, I don't want to set unrealistic expectations, so I must inform you that I have NO idea whether Mozilla Corporation will accept any additional NSS changes at this point or not. Three weeks ago, Bob Relyea and I wrote to MoCo powers-that-be asking about this, and we're

Re: Pending roots and EV enablements

On 14/05/09 00:38, Nelson B Bolyard wrote: I suppose that, on principle, you're right. In the past, I would have readily done so. But today my idealism is severely tempered by the pragmatic realization that there are now hundreds of open bugs and RFEs that I have filed, some years old, that hav

Re: Pending roots and EV enablements

Eddy Nigg wrote, On 2009-05-18 19:28 PDT: > On 05/19/2009 05:15 AM, Nelson B Bolyard: >> Eddy Nigg wrote, On 2009-05-18 18:38 PDT: >> >>> I'll create also the missing patch for Cybertrust and/or upon advise a >>> mega patch of all EV enablements. Errr...please advise :-) >>> >> Thanks Eddy.

Re: Pending roots and EV enablements

On 05/19/2009 05:15 AM, Nelson B Bolyard: Eddy Nigg wrote, On 2009-05-18 18:38 PDT: I'll create also the missing patch for Cybertrust and/or upon advise a mega patch of all EV enablements. Errr...please advise :-) Thanks Eddy. I see you've already produced patches for 4 of those 6 b

Re: Pending roots and EV enablements

Eddy Nigg wrote, On 2009-05-18 18:38 PDT: > I'll create also the missing patch for Cybertrust and/or upon advise a > mega patch of all EV enablements. Errr...please advise :-) Thanks Eddy. I see you've already produced patches for 4 of those 6 bugs. Patches for the remaining two would also be ni

Re: Pending roots and EV enablements

On 05/19/2009 04:23 AM, Nelson B Bolyard: The normal testing procedure also involves building test builds for Linux and MacOS/X. I didn't build test builds of nssckbi for those platforms. I would welcome others here to take the patch from bug 493660 and build optimized builds of nssckbi for MaxO

Re: Pending roots and EV enablements

There are 9 NSS bugs requesting new root CA certs and/or changes to trust flags on existing root CA certs in NSS. See them at

Re: Pending roots and EV enablements

On 05/15/2009 01:51 AM, Eddy Nigg: On 05/14/2009 12:46 AM, Gervase Markham: On 11/05/09 20:32, Nelson B Bolyard wrote: Ideally, one could tell Tryserver to "Take Firefox source from the current branch for FF 3.0.x or FF 3.5 (from CVS or Hg, as appropriate), plus NSS from CVS tag X, plus this s

Re: Pending roots and EV enablements

On 15/5/09 00:51, Eddy Nigg wrote: Whatever improvements can be made in the future, I'd really like to see NSS shipped with the latest approved roots and EV enablements. Just to remind the valued audience that an enormous effort was made to ship the leading CAs with EV in the FF 3.0 release, a s

Re: Pending roots and EV enablements

On 05/14/2009 12:46 AM, Gervase Markham: On 11/05/09 20:32, Nelson B Bolyard wrote: Ideally, one could tell Tryserver to "Take Firefox source from the current branch for FF 3.0.x or FF 3.5 (from CVS or Hg, as appropriate), plus NSS from CVS tag X, plus this small patch, and build it", but prese

Re: Pending roots and EV enablements

Gervase Markham wrote, On 2009-05-13 14:46: > On 11/05/09 20:32, Nelson B Bolyard wrote: >> Ideally, one could tell Tryserver to "Take Firefox source from the current >> branch for FF 3.0.x or FF 3.5 (from CVS or Hg, as appropriate), plus NSS >> from CVS tag X, plus this small patch, and build it",

Re: Pending roots and EV enablements

On 11/05/09 20:32, Nelson B Bolyard wrote: Ideally, one could tell Tryserver to "Take Firefox source from the current branch for FF 3.0.x or FF 3.5 (from CVS or Hg, as appropriate), plus NSS from CVS tag X, plus this small patch, and build it", but presently that does not seem possible. Your fu

Re: Pending roots and EV enablements

On 05/11/2009 10:32 PM, Nelson B Bolyard: On May 11, 2009 at 8:44 AM PDT, Eddy Nigg wrote: There are quite some roots which should be included and nobody seems to be working on it. Can Nelson or somebody advise if to provide patches for those roots or not? Changes to the

Re: Pending roots and EV enablements

On May 11, 2009 at 8:44 AM PDT, Eddy Nigg wrote: >> >>> There are quite some roots which should be included and nobody seems >>> to be working on it. Can Nelson or somebody advise if to provide >>> patches for those roots or not? Changes to the built-in root CAs, or the list of EV-enabled CA, inv

Re: Pending roots and EV enablements

On 05/11/2009 08:32 PM, Wan-Teh Chang: On Mon, May 11, 2009 at 8:44 AM, Eddy Nigg wrote: There are quite some roots which should be included and nobody seems to be working on it. Can Nelson or somebody advise if to provide patches for those roots or not? Eddy, thank you very much for

Re: Pending roots and EV enablements

On Mon, May 11, 2009 at 8:44 AM, Eddy Nigg wrote: > > There are quite some roots which should be included and nobody seems to be > working on it. Can Nelson or somebody advise if to provide patches for those > roots or not? Eddy, thank you very much for offering to help. EV enablement patches (f

Re: Pending roots and EV enablements

On 05/11/2009 04:23 AM, Eddy Nigg: On 05/10/2009 05:38 PM, Eddy Nigg: Currently there are a bunch of CA roots to be included into NSS and EV enablements to be made at PSM. I was not successful in contacting Kai Engert and I'm not aware that anybody else does it. Would it be acceptable if I wo

Re: Pending roots and EV enablements

On 05/10/2009 05:38 PM, Eddy Nigg: Currently there are a bunch of CA roots to be included into NSS and EV enablements to be made at PSM. I was not successful in contacting Kai Engert and I'm not aware that anybody else does it. Would it be acceptable if I would start to submit patches for all

Pending roots and EV enablements

Currently there are a bunch of CA roots to be included into NSS and EV enablements to be made at PSM. I was not successful in contacting Kai Engert and I'm not aware that anybody else does it. Would it be acceptable if I would start to submit patches for all outstanding inclusions and updates,