Issue 2170: Add AddTrust External CA Root to net/base/ev_root_ca_metadata.cc http://code.google.com/p/chromium/issues/detail?id=2170
Comment #6 by [EMAIL PROTECTED]: > Ian, my comment was in response to what Rob said regarding what IE7 > does with and without this root in the Windows Trusted Root Certificate > store. It implies that if Chromium could build and validate certificate > chains as IE7 does, we would not need this patch. Agreed. I'm hoping to get my head around the relevant bits of the Chromium code to be able to help make it behave like IE7. > Rob, could you fill out the contributor license agreement at > http://dev.chromium.org/developers/contributing-code? Should be able to do so. Just checking with our Legal Department first. > I installed the root in the Windows Trusted Root Certificate store > on Windows XP, and used IE7 to visit the test URL > https://addtrustexternalcaroot-ev.comodoca.com. I didn't get the > EV indicator in IE7. Is this because that test site's certificate > chain doesn't have the cross-certificates you referred to? Unlike most EV certificates that Comodo issue, that particular test site's certificate is issued directly from the AddTrust External CA Root. No cross-certificates are served by that test server. IIRC, this test site was set up purely for Mozilla's benefit when they were enabling the AddTrust External CA Root for EV in PSM. As I mentioned in the "Additional Information", the AddTrust External CA Root is not in the Microsoft Root Certificate Program. So, Wan-Teh, when you installed it, it would not have been associated with Comodo's EV Policy OID in your local Windows Trusted Root Certificate store. -- You received this message because you are listed in the owner or CC fields of this issue, or because you starred this issue. You may adjust your issue notification preferences at: http://code.google.com/hosting/settings --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Chromium-bugs" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/chromium-bugs?hl=en -~----------~----~----~----~------~----~------~--~---
