Thank for bringing this to my attention. I marked the old GTS roots as
removed (which they were), but the intermediate certs are probably in
the CCADB as under the old roots, so I will need to re-parent them.
(CCADB doesn't handle this situation well -- only allows one parent.)
Thanks,
Kathleen
On 1/26/23 1:56 PM, 'Amir Omidi' via CCADB Public wrote:
Hi Filippo,
Thanks for reporting this! We're looking into it and will provide an
update ASAP.
Cheers!
Amir
On Thursday, January 26, 2023 at 4:49:21 PM UTC-5 Filippo Valsorda wrote:
Hello,
It looks like a number of active GTS intermediates (as well as a
couple others, which might or might not be related, full list below),
including the one in the chain served by google.com
<http://google.com>, have disappeared from the list served at
https://ccadb-public.secure.force.com/mozilla/MozillaIntermediateCertsCSVReport
This happened in the last two days. I have noticed because my
github.com/FiloSottile/intermediates
<http://github.com/FiloSottile/intermediates> module tried to
self-update, but failed a test that checks if it can connect to
google.com <http://google.com> while discarding the server-sent
certificates.
https://github.com/FiloSottile/intermediates/actions/runs/4011757973/jobs/6889623737
Cheers,
Filippo
CN=Certum Trusted Network CA 2; OU=Certum Certification Authority;
O=Unizeto Technologies S.A.; C=PL
CN=GIAG4x; O=Google Trust Services LLC; C=US
CN=GTS CA 1C3; O=Google Trust Services LLC; C=US
CN=GTS CA 1D4; O=Google Trust Services LLC; C=US
CN=GTS CA 1P5; O=Google Trust Services LLC; C=US
CN=GTS Root R1; O=Google Trust Services LLC; C=US
CN=GTS Y1; O=Google Trust Services LLC; C=US
CN=GTS Root R2; O=Google Trust Services LLC; C=US
CN=GTS Y2; O=Google Trust Services LLC; C=US
CN=GTS Root R3; O=Google Trust Services LLC; C=US
CN=GTS Y3; O=Google Trust Services LLC; C=US
CN=GTS CA 2A1; O=Google Trust Services LLC; C=US
CN=GTS Root R4; O=Google Trust Services LLC; C=US
CN=GTS Y4; O=Google Trust Services LLC; C=US
CN=GIAG4 ECC; O=Google Trust Services LLC; C=US
CN=GlobalSign; OU=GlobalSign ECC Root CA - R4; O=GlobalSign
--
You received this message because you are subscribed to the Google
Groups "CCADB Public" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/ccadb.org/d/msgid/public/fe06eb63-274a-4423-bd76-607ce4a429b0n%40ccadb.org
<https://groups.google.com/a/ccadb.org/d/msgid/public/fe06eb63-274a-4423-bd76-607ce4a429b0n%40ccadb.org?utm_medium=email&utm_source=footer>.
--
You received this message because you are subscribed to the Google Groups "CCADB
Public" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/ccadb.org/d/msgid/public/d4bb1496-3fa3-f1ae-2ae3-c69a583a5687%40mozilla.com.
