Apple: Non-compliant Common Name Length

2019-06-05 Thread Apple CA via dev-security-policy
On June 4, Apple submitted an incident report: https://bugzilla.mozilla.org/show_bug.cgi?id=1556906, which is reposted below. ___ Incident Report 1. How your CA first became aware of the problem (e.g. via a

Apple: Precertificates without corresponding certificates return OCSP value of "unknown"

2019-09-13 Thread Apple CA via dev-security-policy
We’ve been following the discussions regarding how OCSP responders should handle Precertificates without corresponding certificates and what the appropriate response indicator should be (good, revoked, or unknown). Based on the recent clarifications at [1], we want to inform the community that

Apple OCSP responders return responses with incorrect issuer

2019-10-10 Thread Apple CA via dev-security-policy
Apple has submitted this preliminary incident report: https://bugzilla.mozilla.org/show_bug.cgi?id=1588001, which is reposted below. On 03-October-2019 at 13:52 PT, we were notified via a problem report submitted to our Problem Reporting Mechanism that our OCSP responders were returning

Re: Apple OCSP responders return responses with incorrect issuer

2019-10-17 Thread Apple CA via dev-security-policy
On October 17, Apple submitted an incident report: https://bugzilla.mozilla.org/show_bug.cgi?id=1588001#c3, which is reposted below. Incident Report 1. How your CA first became aware of the problem (e.g. via a problem report submitted to your Problem Reporting Mechanism, a discussion in