[Desktop-packages] [Bug 1271513]

2019-04-12 Thread Rafamdn
Created attachment 8775143 2016 ETSI Seal -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to thunderbird in Ubuntu. https://bugs.launchpad.net/bugs/1271513 Title: www.cert.fnmt.es certificates are not included in Mozilla products Status

[Desktop-packages] [Bug 1271513]

2019-04-12 Thread Rafamdn
Also, regarding the error "BR certificates must not contain directoryName type alternative name", it has been discussed yet at https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/7wIZmwp4qGQ. As it was commented, our certificates are compliant with this requirement as we set the Do

[Desktop-packages] [Bug 1271513]

2019-04-12 Thread Rafamdn
Created attachment 8775145 2016 Browser audit Attestation -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to thunderbird in Ubuntu. https://bugs.launchpad.net/bugs/1271513 Title: www.cert.fnmt.es certificates are not included in Mozilla p

[Desktop-packages] [Bug 1271513]

2019-04-12 Thread Rafamdn
(In reply to Kathleen Wilson from comment #155) > Error > CA certificates must include commonName in subject > ~~ We have a question regarding this Error. In "CA-Browser-Forum-BR-1.3.2" doc, at section 7.2.1 it's said: "The Certificate Subject MUST contain the following: ‐ co

[Desktop-packages] [Bug 1271513]

2019-04-12 Thread Rafamdn
(In reply to Kathleen Wilson from comment #150) > I will try to start the discussion soon. > https://wiki.mozilla.org/CA:Schedule#Queue_for_Public_Discussion > > In the meantime, please clarify your audit plans for 2015. > > My current notes have... > WebTrust CA Audit (5/4/2014): > https://www.c

[Desktop-packages] [Bug 1271513]

2019-04-12 Thread Rafamdn
Created attachment 9057798 Audit_Attestation_FNMT_2019.pdf -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to thunderbird in Ubuntu. https://bugs.launchpad.net/bugs/1271513 Title: www.cert.fnmt.es certificates are not included in Mozilla

[Desktop-packages] [Bug 1271513]

2019-04-12 Thread Rafamdn
The (old) CA that issued that certificate was remove from this inclusion request -> Comment #98 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to thunderbird in Ubuntu. https://bugs.launchpad.net/bugs/1271513 Title: www.cert.fnmt.es cer

[Desktop-packages] [Bug 1271513]

2019-04-12 Thread Rafamdn
(In reply to Kathleen Wilson from comment #144) > > > When I entered https://www.sede.fnmt.gob.es/certificados into the revocation > checker the following OCSP errors were listed. Please comment in this bug > when these have been resolved. Two days ago we have updated our OCSP Server configuratio

[Desktop-packages] [Bug 1271513]

2019-04-12 Thread Rafamdn
Analyzing the raw data (by clicking in "Raw data" button at the top right of page), we can see that the OCSP GET Request for subordinate CA contains special characters (two '+' symbols) that should be encoded properly (URL encoding). I attach copy&paste raw data of OCSP request (PEM encoded): ---

[Desktop-packages] [Bug 1271513]

2019-04-12 Thread Rafamdn
(In reply to Kathleen Wilson from comment #146) > I just tried it again: > http://certificate.revocationcheck.com/www.sede.fnmt.gob.es > returns: Error parsing OCSP response: asn1: structure error: tags don't > match (16 vs {class:0 tag:28 length:72 isCompound:true}) {optional:false > explicit:fals

[Desktop-packages] [Bug 1271513]

2019-04-12 Thread Rafamdn
(In reply to Kathleen Wilson from comment #142) > No. A self-statement does not help. > We need audit statement(s) that meet the requirements of sections 11 through > 14 of > https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/ > policy/inclusion/ Hi Kathleen. Regarding

[Desktop-packages] [Bug 1271513]

2015-02-26 Thread Rafamdn
(In reply to Kathleen Wilson from comment #139) > Please see item #2 of > https://wiki.mozilla.org/CA: > Information_checklist#Verification_Policies_and_Practices Hi Kathleen, on this issue, item #2 says: "If you provide the information yourself (e.g., it is hosted on your own web site), please

[Desktop-packages] [Bug 1271513]

2015-02-17 Thread Rafamdn
Created attachment 8565442 General CPS applicable to all FNMT's CAs (February 2015) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1271513 Title: www.cert.fnmt.es certificates are not

[Desktop-packages] [Bug 1271513]

2015-01-22 Thread Rafamdn
Hi Kathleen. We are requesting to have enabled for Websites and Code Signing. We thought that "WebTrust for Certification Authorities" audits was enough for that. Anyway, we have already started an ETSI 101 456 audit process and we expect to have concluded it in a few months -- You receiv

[Desktop-packages] [Bug 1271513]

2014-12-15 Thread Rafamdn
Created attachment 8536614 CA Information: pending questions -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1271513 Title: www.cert.fnmt.es certificates are not included in Mozilla pr

[Desktop-packages] [Bug 1271513]

2014-12-12 Thread Rafamdn
Created attachment 8535578 "CA Administracion Pública" CPS for Public Organizations and Administrations Updated version of specific CPS of CA for Public Organizations and Administrations -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to f

[Desktop-packages] [Bug 1271513]

2014-12-12 Thread Rafamdn
Created attachment 8535573 Truthful translation of "AC Componentes" CPS Truthful and complete translation into English of new software component CA. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpa

[Desktop-packages] [Bug 1271513]

2014-12-10 Thread Rafamdn
Also, I attach reference to WebTrust seal recently obtained: https://cert.webtrust.org/ViewSeal?id=1784 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1271513 Title: www.cert.fnmt.es

[Desktop-packages] [Bug 1271513]

2014-12-10 Thread Rafamdn
Created attachment 8534334 General CPS applicable to all FNMT's CAs (aproved on 10/2014) Updated General CPS includes: - Periodicity of one year to the fulfilment of audits - Prohibition to issue CA certificates to other different entities to FNMT-RCM. - Limitation to a maximum of 3 years the per