Re: More SHA-1 certs

2016-02-04 Thread Erwann Abalea
Le dimanche 31 janvier 2016 18:47:53 UTC+1, Peter Bowen a écrit : > Sub-CA under SHECA (which has applied to be in the Mozilla program) > https://crt.sh/?id=12367776=cablint Wow. Each certificate has its own CRL. And this CRL is not properly partitioned (missing IDP extension).

Re: CA Community in Salesforce

2016-02-04 Thread Kathleen Wilson
I have updated a couple wiki pages in regards to the CA Community in Salesforce... + Added an 'After Inclusion' section to the page about how to apply for inclusion: https://wiki.mozilla.org/CA:How_to_apply#After_Inclusion + Added steps 15 and 16 to the Process Overview:

Re: CA Community in Salesforce

2016-02-04 Thread Kathleen Wilson
I believe I have issued a CA Community Salesforce license to the Primary Point of Contact (POC) of each currently-included CA. https://wiki.mozilla.org/CA:SalesforceCommunity Please send me email if any of you are a Primary POC for a currently-included CA, and you have not received your CA

Re: SHA1 certs issued this year chaining to included roots

2016-02-04 Thread dave.ta...@rsa.com
Hello- Regarding: > - https://crt.sh/?id=12501254=cablint -- RSA Security 2048 V3 via > RSA Corporate CA v2 via RSA Corporate Server CA v2 All certificates issued with SHA-1 post 1 January 2016 have been revoked and replaced with SHA-2 compliant Certificates as of 4 Feb 2016. The

Re: ComSign Root Renewal Request

2016-02-04 Thread Jesus F
Dear Mozilla community, Reviewing the BR audit report of Comsign Ltd I have a few doubts regarding the audits accepted by Mozilla and may someone can help me. The BR audit was conducted according to the WebTrust forCertification Authorites - SSL Baseline Requirements Audit Criteria version 1.1

Firefox is printing SHA1 warning several times - but which servers use SHA-1?

2016-02-04 Thread Denny Bartelt
When including ads on a website Firefox is printing a SHA-1 warning several times: (30) "This site makes use of a SHA-1 Certificate; it's recommended you use certificates with signature algorithms that use hash functions stronger than SHA-1." Is there a way to print which servers are using

Re: Firefox is printing SHA1 warning several times - but which servers use SHA-1?

2016-02-04 Thread Richard Barnes
Hey Denny: Good idea. Unfortunately, there's not a way to turn it on right now; we would need to add code. Mark: Could we, say, add the host name to the string? ("The server at $DOMAIN makes use of...") The method producing the warning is on nsHTTPChannel, so it seems like the host name should

Re: Firefox is printing SHA1 warning several times - but which servers use SHA-1?

2016-02-04 Thread Mark Goodwin
Where are you viewing these? If you use the web console in the developer tools, the server is displayed alongside the warning. On Thu, Feb 4, 2016 at 9:13 AM, Denny Bartelt < d.bart...@netzathleten-media.de> wrote: > When including ads on a website Firefox is printing a SHA-1 warning > several