MozillaWiki

CA/Dashboard: Difference between revisions

Page Discussion

CA/Dashboard (view source)

Revision as of 17:44, 21 November 2025

348 bytes added ,  21 November
→‎Ready for CP/CPS Review and Public Discussion: Changed title
(include_fields has to be an array now)
 
(29 intermediate revisions by 2 users not shown)
Line 3: Line 3:
When Mozilla receives a request for a change to our [[CA|Root Store]], the request passes through the stages outlined below.
When Mozilla receives a request for a change to our [[CA|Root Store]], the request passes through the stages outlined below.


== To Be Assigned ==
Processing priorities are assigned according to the '''[[CA/Prioritization|prioritization schedule]]'''.


This section lists CAs who have applied for inclusion but Mozilla has not yet started processing their applications. Action needed by: '''Mozilla and/or CA'''.
== Received - Initial Status ==
 
This section lists CAs who have applied for inclusion, but full processing of their applications has not been initiated because additional data is required in the CCADB or other preliminary matters need to be addressed. Action needed by: '''CA'''.


<bugzilla>
<bugzilla>
    {
{
        "component":"CA Certificate Root Program",
  "product": "CA Program",
        "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
  "component": "CA Certificate Root Program",
        "whiteboard":"ca-initial",
  "status": ["UNCONFIRMED","NEW","ASSIGNED","REOPENED"],
        "cf_blocking_b2g_type":"contains",
  "resolution": "---",
        "include_fields": ["id", "summary", "status", "assigned_to", "whiteboard", "last_change_time"]
  "status_whiteboard_type": "allwordssubstr",
    }
  "status_whiteboard": "[ca-initial]",
  "include_fields": ["id","summary","status","priority","whiteboard","creation_time","last_change_time"],
  "order": "priority,changeddate",
  "limit": 200
}
</bugzilla>
</bugzilla>


Line 22: Line 28:


<bugzilla>
<bugzilla>
    {
{
        "component":"CA Certificate Root Program",
  "product": "CA Program",
        "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
  "component":"CA Certificate Root Program",
        "whiteboard":"ca-verifying",
  "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
        "cf_blocking_b2g_type":"contains",
  "resolution": "---",
        "include_fields": ["id", "summary", "status", "assigned_to", "whiteboard", "last_change_time"]
  "status_whiteboard_type": "allwordssubstr",
    }
  "status_whiteboard":"ca-verifying",
  "include_fields": ["id", "summary", "status", "priority", "whiteboard", "creation_time", "last_change_time"],
  "order": "priority,changeddate",
  "limit": 200
}
</bugzilla>
</bugzilla>
== On Hold (Super CA) ==


This section lists CAs who have been judged to be "Super CAs". Super CAs need to have all their sub-CAs apply for inclusion and be accepted before their application can progress. Action needed by: '''CA'''.
== Ready for Public Discussion ==
 
This section lists CAs who have provided all necessary information in the CCADB, as set forth in [[CA/Application_Process#Process_Overview|step 2 of the inclusion/update request process]] and are ready for public discussion (and CP/CPS review, if necessary), under steps 3 and 4 of the application process.  


<bugzilla>
<bugzilla>
    {
{
        "component":"CA Certificate Root Program",
  "product": "CA Program",
        "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
  "component":"CA Certificate Root Program",
        "whiteboard":"ca-hold",
  "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
        "cf_blocking_b2g_type":"contains",
  "resolution": "---",
        "include_fields": ["id", "summary", "status", "assigned_to", "whiteboard", "last_change_time"]
  "status_whiteboard_type": "allwordssubstr",
    }
  "status_whiteboard":"ca-ready-for-discussion",
  "include_fields": ["id", "summary", "status", "priority", "whiteboard", "creation_time", "last_change_time"],
  "order": "priority,changeddate",
  "limit": 200
}
</bugzilla>
</bugzilla>
== Ready for Public Discussion ==


This section lists CAs for whom the information verification phase is complete, and the next stage is for Mozilla to begin a public discussion in the mozilla.dev.security.policy group about the merits of their inclusion. Action needed by: '''Mozilla'''.
== Detailed CP/CPS Review ==


To see the approximate order in which discussions may be started (after the BR Self Assessment has been provided by the CA and verified by Mozilla):
This section lists CAs who need to have their CP/CPS documents carefully reviewed according to [[CA/Application_Process#Process_Overview|step 4 of the inclusion/update request process]].  
* Click on the "Whiteboard" column to sort
** Whiteboard tags with "-new" indicate that the CA does not currently have a root certificate in Mozilla's program.
** Whiteboard tags without "-new" indicate that the CA already has a root certificate in Mozilla's program, so they have previously been through Mozilla's rigorous vetting process, and will be given priority in the discussions.
* In general:
** Discussions will be started according to the date when the bug became ready for discussion (the date listed in the whiteboard); i.e. the oldest date will typically be the next discussion to start.
** Only one or two of the "-new" requests may be in discussion at any given point. The amount of time that each discussion takes varies dramatically depending on the number of reviewers contributing to the discussion, and the types of concerns that are raised.
** Requests that are from CAs that already have roots included in NSS may be discussed in parallel, so several of these discussions can happen at the same time.


<bugzilla>
<bugzilla>
    {
{
        "component":"CA Certificate Root Program",
  "product": "CA Program",
        "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
  "component":"CA Certificate Root Program",
        "whiteboard":"ca-ready-for-discussion",
  "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
        "cf_blocking_b2g_type":"contains",
  "resolution": "---",
        "include_fields": ["id", "summary", "status", "assigned_to", "whiteboard", "last_change_time"]
  "status_whiteboard_type": "allwordssubstr",
    }
  "status_whiteboard":"ca-cps-review",
  "include_fields": ["id", "summary", "status", "priority", "whiteboard", "creation_time", "last_change_time"],
  "order": "priority,changeddate",
  "limit": 200
}
</bugzilla>
</bugzilla>


Line 70: Line 81:


<bugzilla>
<bugzilla>
    {
{
        "component":"CA Certificate Root Program",
  "product": "CA Program",
        "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
  "component":"CA Certificate Root Program",
        "whiteboard":"ca-in-discussion",
  "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
        "cf_blocking_b2g_type":"contains",
  "resolution": "---",
        "include_fields": ["id", "summary", "status", "assigned_to", "whiteboard", "last_change_time"]
  "status_whiteboard_type": "allwordssubstr",
    }
  "status_whiteboard":"ca-in-discussion",
  "include_fields": ["id", "summary", "status", "whiteboard", "creation_time", "last_change_time"],
  "order": "priority,changeddate",
  "limit": 200
}
</bugzilla>
</bugzilla>
== Discussions On Hold ==
== Discussions On Hold ==


Line 83: Line 99:


<bugzilla>
<bugzilla>
    {
{
        "component":"CA Certificate Root Program",
  "product": "CA Program",
        "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
  "component":"CA Certificate Root Program",
        "whiteboard":"ca-discussion-hold",
  "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
        "cf_blocking_b2g_type":"contains",
  "resolution": "---",
        "include_fields": ["id", "summary", "status", "assigned_to", "whiteboard", "last_change_time"]
  "status_whiteboard_type": "allwordssubstr",
    }
  "status_whiteboard":"ca-discussion-hold",
  "include_fields": ["id", "summary", "status", "whiteboard", "creation_time", "last_change_time"],
  "limit": 200
}
</bugzilla>
</bugzilla>
== Pending Approval ==
== Pending Approval ==
Line 96: Line 115:


<bugzilla>
<bugzilla>
    {
{
        "component":"CA Certificate Root Program",
  "product": "CA Program",
        "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
  "component":"CA Certificate Root Program",
        "whiteboard":"Pending Approval",
  "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
        "cf_blocking_b2g_type":"contains",
  "resolution": "---",
        "include_fields": ["id", "summary", "status", "assigned_to", "whiteboard", "last_change_time"]
  "status_whiteboard_type": "allwordssubstr",
    }
  "status_whiteboard":"ca-pending-approval",
  "include_fields": ["id", "summary", "status", "whiteboard", "creation_time", "last_change_time"],
  "limit": 200
}
</bugzilla>
</bugzilla>
== Approved and Pending Code Changes ==
== Approved and Pending Code Changes ==


Line 109: Line 132:


<bugzilla>
<bugzilla>
    {
{
        "component":"CA Certificate Root Program",
  "product": "CA Program",
        "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
  "component":"CA Certificate Root Program",
        "whiteboard":"Approved",
  "status":["UNCONFIRMED", "NEW", "ASSIGNED", "REOPENED"],  
        "cf_blocking_b2g_type":"contains",
  "resolution": "---",
        "include_fields": ["id", "summary", "status", "assigned_to", "whiteboard", "last_change_time"]
  "status_whiteboard_type": "allwordssubstr",
    }
  "status_whiteboard":"approved",
  "include_fields": ["id", "summary", "status", "whiteboard", "creation_time", "last_change_time"],
  "limit": 200
}
</bugzilla>
 
== On Hold (Super CA) ==
 
This section lists CAs who have been judged to be "Super CAs". Super CAs need to have all their sub-CAs apply for inclusion and be accepted before their application can progress. Action needed by: '''CA'''.
 
<bugzilla>
{
  "product": "CA Program",
  "component":"CA Certificate Root Program",
  "resolution": "---",
  "status_whiteboard_type": "allwordssubstr",
  "status_whiteboard":"ca-hold",
  "include_fields": ["id", "summary", "status", "whiteboard", "last_change_time"],
  "limit": 200
}
</bugzilla>
</bugzilla>
== Closed ==
A historical view of past Root Inclusion Requests may be found here:
* https://wiki.mozilla.org/CA/Closed_Root_Inclusion_Requests
Bwilson
Confirmed users
569

edits

Retrieved from "https://wiki.mozilla.org/Special:MobileDiff/1183139...1255746"