Confirmed users
659
edits
CA/Lessons Learned: Difference between revisions
Jump to navigation
Jump to search
Added sections for CA profile errors
(Edited Missing CAs in Audit Letters) |
(Added sections for CA profile errors) |
||
| Line 19: | Line 19: | ||
| | | | ||
| Use standardized templates that have been validated against CABF and Mozilla requirements; automate the profile validation process | | Use standardized templates that have been validated against CABF and Mozilla requirements; automate the profile validation process | ||
|- | |||
| Certificates with "https" instead of "http" | |||
| Bug #s [https://bugzilla.mozilla.org/show_bug.cgi?id=1963456 1963456] | |||
| Scan certificate profile configurations to ensure that the URLs for OCSP, CRL, AIAs, etc. indicate http and not https | |||
|- | |||
| Incorrect Certificate Policy Identifiers | |||
| Bug #s [https://bugzilla.mozilla.org/show_bug.cgi?id=1963663 1963663], [https://bugzilla.mozilla.org/show_bug.cgi?id=1921597 1921597], [https://bugzilla.mozilla.org/show_bug.cgi?id=1921598 1921598] | |||
| Ensure proper interpretation of CA/Browser Forum requirements concerning CABF Reserved Certificate Policy Identifiers (CP OIDs); accurately incorporate CP-OID requirements in certificate profiles; update CA generation procedures and certificate profiles; add compliance check prior to certificate issuance; implement an automatic linter to check conformity of intermediate CA certificates | |||
|- | |- | ||
| Duplicate Serial Numbers | | Duplicate Serial Numbers | ||