Add GDCA root certificate to Chrome "EV-Qualified" list
Reported by
wangsn1...@gmail.com,
Nov 17 2017
|
|||
Issue descriptionUserAgent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36 Steps to reproduce the problem: Access the test websites, which possess SSL certificates issued by GDCA’s Root Certificate, using HTTPS protocol in Chrome browser. What is the expected behavior? Add GDCA root certificate to Chrome "EV-Qualified" list. What went wrong? The Chrome browser shows that root certificates are not trusted. Did this work before? N/A Chrome version: 55.0.2883.87 Channel: n/a OS Version: 6.1 (Windows 7, Windows Server 2008 R2) Flash Version: Shockwave Flash 23.0 r0 ① Friendly Name: GDCA TrustAUTH R5 ROOT Cert Location: http://www.gdca.com.cn/cert/GDCA_TrustAUTH_R5_ROOT.der SHA-1 Fingerprint: 0f 36 38 5b 81 1a 25 c3 9b 31 4e 83 ca e9 34 66 70 cc 74 b4 Test URL: https://ev-ssl-test-1.95105813.cn/ EV Policy OID(s): 1.2.156.112559.1.1.6.1 ② Annual audits are performed by PricewaterhouseCoopers Zhong Tian LLP, according to the WebTrust criteria. Standard Audit: https://cert.webtrust.org/SealFile?seal=2231&file=pdf BR Audit: https://cert.webtrust.org/SealFile?seal=2232&file=pdf EV Audit: https://cert.webtrust.org/SealFile?seal=2233&file=pdf ③ CA Document Repository: https://www.gdca.com.cn CPS: https://bugzilla.mozilla.org/attachment.cgi?id=8871240 CRL URLs: http://www.gdca.com.cn/crl/GDCA_TrustAUTH_R5_ROOT.crl OCSP URL: http://www.gdca.com.cn/TrustAUTH/ocsp ④ GDCA TrustAUTH R5 ROOT has already been included in Microsoft in June 2015. (https://social.technet.microsoft.com/wiki/contents/articles/38117.microsoft-trusted-root-certificate-program-participants-as-of-june-27-2017.aspx) GDCA TrustAUTH R5 ROOT has been included in NSS 3.34 release. (https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.34_release_notes)
,
Nov 17 2017
,
Mar 7 2018
,
Mar 7 2018
|
|||
►
Sign in to add a comment |
|||
Comment 1 by dtapu...@chromium.org
, Nov 17 2017