New issue
Advanced search Search tips

Issue 786282 link

Starred by 2 users

Issue metadata

Status: Unconfirmed
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Chrome , Mac
Pri: 3
Type: Feature



Sign in to add a comment

Add GDCA root certificate to Chrome "EV-Qualified" list

Reported by wangsn1...@gmail.com, Nov 17 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36

Steps to reproduce the problem:
Access the test websites, which possess SSL certificates issued by GDCA’s Root Certificate, using HTTPS protocol in Chrome browser.

What is the expected behavior?
Add GDCA root certificate to Chrome "EV-Qualified" list.

What went wrong?
The Chrome browser shows that root certificates are not trusted.

Did this work before? N/A 

Chrome version: 55.0.2883.87  Channel: n/a
OS Version: 6.1 (Windows 7, Windows Server 2008 R2)
Flash Version: Shockwave Flash 23.0 r0

①
Friendly Name: GDCA TrustAUTH R5 ROOT
Cert Location: http://www.gdca.com.cn/cert/GDCA_TrustAUTH_R5_ROOT.der
SHA-1 Fingerprint: 0f 36 38 5b 81 1a 25 c3 9b 31 4e 83 ca e9 34 66 70 cc 74 b4
Test URL: https://ev-ssl-test-1.95105813.cn/
EV Policy OID(s): 1.2.156.112559.1.1.6.1

②
Annual audits are performed by PricewaterhouseCoopers Zhong Tian LLP, according to the WebTrust criteria.
Standard Audit: https://cert.webtrust.org/SealFile?seal=2231&file=pdf
BR Audit: https://cert.webtrust.org/SealFile?seal=2232&file=pdf
EV Audit: https://cert.webtrust.org/SealFile?seal=2233&file=pdf

③
CA Document Repository: https://www.gdca.com.cn
CPS: https://bugzilla.mozilla.org/attachment.cgi?id=8871240
CRL URLs: 
http://www.gdca.com.cn/crl/GDCA_TrustAUTH_R5_ROOT.crl
OCSP URL: http://www.gdca.com.cn/TrustAUTH/ocsp

④
GDCA TrustAUTH R5 ROOT has already been included in Microsoft in June 2015.
(https://social.technet.microsoft.com/wiki/contents/articles/38117.microsoft-trusted-root-certificate-program-participants-as-of-june-27-2017.aspx)
GDCA TrustAUTH R5 ROOT has been included in NSS 3.34 release.
(https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.34_release_notes)
 
Components: Internals>Network>SSL
Components: -Internals>Network>SSL Internals>Network>EV
Labels: -Type-Bug -Pri-2 OS-Chrome OS-Linux OS-Mac Pri-3 Type-Feature
Cc: rsleevi@chromium.org awhalley@chromium.org
 Issue 611673  has been merged into this issue.
Owner: asymmetric@chromium.org

Sign in to add a comment