Re: Microsec: Revoked subordinate CA certificates under the „Microsec e-Szigno Root CA 2009” root

2020-06-05 Thread Sándor dr . Szőke via dev-security-policy
The information has been updated. There is no Microsec Audit Letter Validation Failure in CCADB. ___ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy

Re: Microsec: Revoked subordinate CA certificates under the „Microsec e-Szigno Root CA 2009” root

2020-05-29 Thread Sándor dr . Szőke via dev-security-policy
> Presently Microsec has one ALV failure in the CCADB regarding the earliest > version of the "Microsec e-Szigno Root CA 2009" Root Certificate. > To resolve this warning, Microsec will request a new audit report from the > auditor that includes this third root certificate too. > There is no

Re: Microsec: Revoked subordinate CA certificates under the „Microsec e-Szigno Root CA 2009” root

2020-04-03 Thread Sándor dr . Szőke via dev-security-policy
I summarize the issue in a form of an incident report. 1. How your CA first became aware of the problem (e.g. via a problem report submitted to your Problem Reporting Mechanism, a discussion in mozilla.dev.security.policy, a Bugzilla bug, or internal self-audit), and the time and date.

Re: Microsec: Revoked subordinate CA certificates under the „Microsec e-Szigno Root CA 2009” root

2020-03-29 Thread Wayne Thayer via dev-security-policy
This issue is now documented in https://bugzilla.mozilla.org/show_bug.cgi?id=1625767 On Tue, Mar 24, 2020 at 12:29 PM Sándor dr. Szőke via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > > Investigation of the situation: > > 2009-03-06 > Microsec Ltd. issued the