Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
SG Trust Services Root Inclusion Request
80 views
Skip to first unread message
Kathleen Wilson
Nov 15, 2012, 5:15:25 PM11/15/12
to mozilla-dev-s...@lists.mozilla.org
SG Trust Services has applied to add the “SG TRUST SERVICES RACINE” root
certificate and turn on the Email trust bit.
SG Trust Services is a subsidiary of Groupe SG, which is the high level
entity of all subsidiaries of Société Générale, one of the oldest and
largest banks in France and is a major international financial services
company. Customers are the general public who make e-Services with banks
and French government third parties.
The request is documented in the following bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=662259
And in the pending certificates list here:
http://www.mozilla.org/projects/security/certs/pending/#SG%20Trust%20Services
Summary of Information Gathered and Verified:
https://bugzilla.mozilla.org/attachment.cgi?id=672856
Noteworthy points:
* The primary documents are the CP documents listed below, which are in
French. Some sections have been translated into English.
Document Repository: http://www.sgtrustservices.com/entreprise/pc/index.htm
CP for Authentication and Encryption Certs:
http://www.sgtrustservices.com/entreprise/pc/authentification/index.htm
CP for Signing Certs:
http://www.sgtrustservices.com/entreprise/pc/signature/index.htm
CP for 2-Star Certs:
https://www.sgts.rgs2e.sgtrustservices.com/doc/PC/SG_TS_2E_PC_Authentification.pdf
CP for 2-Star Certs (English translation of some sections):
https://bugzilla.mozilla.org/attachment.cgi?id=560318
The “SG TRUST SERVICES RACINE” root has two internally-operated
intermediate certificates, one for authentication certificates and
another for signing certificates.
The request is to turn on the Email trust bit.
* CP for 2-Star Certs Section 3.2.3.3 describes the steps to verify and
register a Certificate Manager (the customer). Certificate Manager is a
person in a client company of SG Trust Services who can collect the
registration document (Individual Subscriber Request) of the Subscriber,
and validate the registration documents before sending to Registration
Service
** The Legal Representative also signs the subscription contract between
the organisation to which they belong (the Client) and SG Trust Services.
** The Legal Representative must provide the future Manager with a
"K-bis” certifying the company’s registration with a French trade and
companies register (or any similar trade register for foreign entities)
or an identification certificate from the Répertoire National des
Entreprises et de leurs Établissements database. Legal Representatives
of an association must provide a copy of the Journal Officiel containing
the mention of their organisation as well as a copy of its articles of
association and the minutes of the last Annual General Meeting during
which an executive was appointed.
** The Customer account manager meets with the future CM in person and
checks their proof of identity.
** The Customer account manager validates the appointment of the
Certificate Manager and verifies that:
-- The Registration File is complete.
-- The Legal Representative has signed the Certificate Manager
Identification Form and the subscription contract.
-- The future Certificate Manager has signed the Certificate Manager
Identification Form.
-- The information in the Certificate Manager Identification Form is
consistent with both the ID card (for personal ID information) and the
subscription contract (for the organisation's information).
* CP for 2-Star Certs Section 3.2.3.4: The following procedure is
systematically applied:
- The future Subscriber must bring the Certificate Manager his ID card.
- The Certificate Manager verifies that the person present matches the
ID card.
- The Certificate Manager photocopies the proof of identity adding
"Certified Copy" and signs it. The Subscriber also signs the photocopy
of the ID card.
- The Certificate Manager ensures that the future Subscriber is
authorised to use the certificates on behalf of the Client.
- The Certificate Manager asks the Subscriber to complete and sign the
Individual Subscriber Request Form. He ensures that the identity
information filled in by the Subscriber matches the information on the
ID card.
* The Certificate Manager verifies that the email to be included in the
certificate is correct and is attached to his organization before
sending to Registration Service.
* The Certificate Manager sends the registration file to the Customer
account manager. The registration file of a new Subscriber includes:
- The Individual Subscriber Request (ISR) form dated less than 3 months
prior, completed and signed both by the future Subscriber and the CM.
-- The ISR form includes personal information on the future Subscriber
required for creating the certificate.
-- The ISR form includes the General Terms and Conditions of Use.
- The photocopy of the Certificate Subscriber's ID card, signed by the
Certificate Manager and the Subscriber.
* Registration Service validates each subscriber’s registration demand by:
- Validating that the Certificate Manager who provided the registration
documents is well-known;
- Validating the completion of registration documents;
- Validating the copy of the subscriber’s identity card;
- Compare signature of disclosures statements and signature of the
identity card.
* The URL to install the certificate is emailed to the email address
that is included in the certificate.
* Root Cert URL: https://bugzilla.mozilla.org/attachment.cgi?id=608632
* Example Certificates provided in the bug
https://bugzilla.mozilla.org/show_bug.cgi?id=662259#c39
* CRL
http://crl.sgtrustservices.com/racine-GroupeSG/LatestCRL
http://crl.sgtrustservices.com/SGTS-2Etoiles/LatestCRL
(NextUpdate: 6 days)
* OCSP not provided
(Note: This request is to turn on the Email trust bit only, so the CAB
Forum Baseline requirements don’t apply.)
* Audit: Audits are performed against the ETSI TS 102 042 criteria by
LSTI, and a list of the certified certificate providers is provided on
the LSTI website.
http://www.lsti-certification.fr/index.php?option=com_content&view=article&id=54&Itemid=14
ETSI Certificate: https://bugzilla.mozilla.org/attachment.cgi?id=537541
Annual surveillance audits are also performed. The last one was done in
November 2011, and the next one is planned for December 2012.
* Potentially Problematic Practices
(http://wiki.mozilla.org/CA:Problematic_Practices):
** Delegation of email validation to third parties, as described above.
This begins the discussion of the request from SG Trust Services to add
the “SG TRUST SERVICES RACINE” root certificate and turn on the Email
trust bit. At the conclusion of this discussion I will provide a summary
of issues noted and action items. If there are outstanding issues, then
an additional discussion may be needed as follow-up. If there are no
outstanding issues, then I will recommend approval of this request in
the bug.
Kathleen
certificate and turn on the Email trust bit.
SG Trust Services is a subsidiary of Groupe SG, which is the high level
entity of all subsidiaries of Société Générale, one of the oldest and
largest banks in France and is a major international financial services
company. Customers are the general public who make e-Services with banks
and French government third parties.
The request is documented in the following bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=662259
And in the pending certificates list here:
http://www.mozilla.org/projects/security/certs/pending/#SG%20Trust%20Services
Summary of Information Gathered and Verified:
https://bugzilla.mozilla.org/attachment.cgi?id=672856
Noteworthy points:
* The primary documents are the CP documents listed below, which are in
French. Some sections have been translated into English.
Document Repository: http://www.sgtrustservices.com/entreprise/pc/index.htm
CP for Authentication and Encryption Certs:
http://www.sgtrustservices.com/entreprise/pc/authentification/index.htm
CP for Signing Certs:
http://www.sgtrustservices.com/entreprise/pc/signature/index.htm
CP for 2-Star Certs:
https://www.sgts.rgs2e.sgtrustservices.com/doc/PC/SG_TS_2E_PC_Authentification.pdf
CP for 2-Star Certs (English translation of some sections):
https://bugzilla.mozilla.org/attachment.cgi?id=560318
The “SG TRUST SERVICES RACINE” root has two internally-operated
intermediate certificates, one for authentication certificates and
another for signing certificates.
The request is to turn on the Email trust bit.
* CP for 2-Star Certs Section 3.2.3.3 describes the steps to verify and
register a Certificate Manager (the customer). Certificate Manager is a
person in a client company of SG Trust Services who can collect the
registration document (Individual Subscriber Request) of the Subscriber,
and validate the registration documents before sending to Registration
Service
** The Legal Representative also signs the subscription contract between
the organisation to which they belong (the Client) and SG Trust Services.
** The Legal Representative must provide the future Manager with a
"K-bis” certifying the company’s registration with a French trade and
companies register (or any similar trade register for foreign entities)
or an identification certificate from the Répertoire National des
Entreprises et de leurs Établissements database. Legal Representatives
of an association must provide a copy of the Journal Officiel containing
the mention of their organisation as well as a copy of its articles of
association and the minutes of the last Annual General Meeting during
which an executive was appointed.
** The Customer account manager meets with the future CM in person and
checks their proof of identity.
** The Customer account manager validates the appointment of the
Certificate Manager and verifies that:
-- The Registration File is complete.
-- The Legal Representative has signed the Certificate Manager
Identification Form and the subscription contract.
-- The future Certificate Manager has signed the Certificate Manager
Identification Form.
-- The information in the Certificate Manager Identification Form is
consistent with both the ID card (for personal ID information) and the
subscription contract (for the organisation's information).
* CP for 2-Star Certs Section 3.2.3.4: The following procedure is
systematically applied:
- The future Subscriber must bring the Certificate Manager his ID card.
- The Certificate Manager verifies that the person present matches the
ID card.
- The Certificate Manager photocopies the proof of identity adding
"Certified Copy" and signs it. The Subscriber also signs the photocopy
of the ID card.
- The Certificate Manager ensures that the future Subscriber is
authorised to use the certificates on behalf of the Client.
- The Certificate Manager asks the Subscriber to complete and sign the
Individual Subscriber Request Form. He ensures that the identity
information filled in by the Subscriber matches the information on the
ID card.
* The Certificate Manager verifies that the email to be included in the
certificate is correct and is attached to his organization before
sending to Registration Service.
* The Certificate Manager sends the registration file to the Customer
account manager. The registration file of a new Subscriber includes:
- The Individual Subscriber Request (ISR) form dated less than 3 months
prior, completed and signed both by the future Subscriber and the CM.
-- The ISR form includes personal information on the future Subscriber
required for creating the certificate.
-- The ISR form includes the General Terms and Conditions of Use.
- The photocopy of the Certificate Subscriber's ID card, signed by the
Certificate Manager and the Subscriber.
* Registration Service validates each subscriber’s registration demand by:
- Validating that the Certificate Manager who provided the registration
documents is well-known;
- Validating the completion of registration documents;
- Validating the copy of the subscriber’s identity card;
- Compare signature of disclosures statements and signature of the
identity card.
* The URL to install the certificate is emailed to the email address
that is included in the certificate.
* Root Cert URL: https://bugzilla.mozilla.org/attachment.cgi?id=608632
* Example Certificates provided in the bug
https://bugzilla.mozilla.org/show_bug.cgi?id=662259#c39
* CRL
http://crl.sgtrustservices.com/racine-GroupeSG/LatestCRL
http://crl.sgtrustservices.com/SGTS-2Etoiles/LatestCRL
(NextUpdate: 6 days)
* OCSP not provided
(Note: This request is to turn on the Email trust bit only, so the CAB
Forum Baseline requirements don’t apply.)
* Audit: Audits are performed against the ETSI TS 102 042 criteria by
LSTI, and a list of the certified certificate providers is provided on
the LSTI website.
http://www.lsti-certification.fr/index.php?option=com_content&view=article&id=54&Itemid=14
ETSI Certificate: https://bugzilla.mozilla.org/attachment.cgi?id=537541
Annual surveillance audits are also performed. The last one was done in
November 2011, and the next one is planned for December 2012.
* Potentially Problematic Practices
(http://wiki.mozilla.org/CA:Problematic_Practices):
** Delegation of email validation to third parties, as described above.
This begins the discussion of the request from SG Trust Services to add
the “SG TRUST SERVICES RACINE” root certificate and turn on the Email
trust bit. At the conclusion of this discussion I will provide a summary
of issues noted and action items. If there are outstanding issues, then
an additional discussion may be needed as follow-up. If there are no
outstanding issues, then I will recommend approval of this request in
the bug.
Kathleen
Kathleen Wilson
Nov 15, 2012, 5:32:49 PM11/15/12
to mozilla-dev-s...@lists.mozilla.org
On 11/15/12 2:15 PM, Kathleen Wilson wrote:
> SG Trust Services has applied to add the “SG TRUST SERVICES RACINE” root
> certificate and turn on the Email trust bit.
>
> SG Trust Services is a subsidiary of Groupe SG, which is the high level
> entity of all subsidiaries of Société Générale, one of the oldest and
> largest banks in France and is a major international financial services
> company. Customers are the general public who make e-Services with banks
> and French government third parties.
>
> The request is documented in the following bug:
> https://bugzilla.mozilla.org/show_bug.cgi?id=662259
>
> And in the pending certificates list here:
> http://www.mozilla.org/projects/security/certs/pending/#SG%20Trust%20Services
>
>
> Summary of Information Gathered and Verified:
> https://bugzilla.mozilla.org/attachment.cgi?id=672856
>
> Noteworthy points:
>
> * The primary documents are the CP documents listed below, which are in
> French. Some sections have been translated into English.
>
> Document Repository: http://www.sgtrustservices.com/entreprise/pc/index.htm
> CP for Authentication and Encryption Certs:
> http://www.sgtrustservices.com/entreprise/pc/authentification/index.htm
> CP for Signing Certs:
> http://www.sgtrustservices.com/entreprise/pc/signature/index.htm
> CP for 2-Star Certs:
> https://www.sgts.rgs2e.sgtrustservices.com/doc/PC/SG_TS_2E_PC_Authentification.pdf
Ooops! After posting this I noticed that the document links are no
> SG Trust Services has applied to add the “SG TRUST SERVICES RACINE” root
> certificate and turn on the Email trust bit.
>
> SG Trust Services is a subsidiary of Groupe SG, which is the high level
> entity of all subsidiaries of Société Générale, one of the oldest and
> largest banks in France and is a major international financial services
> company. Customers are the general public who make e-Services with banks
> and French government third parties.
>
> The request is documented in the following bug:
> https://bugzilla.mozilla.org/show_bug.cgi?id=662259
>
> And in the pending certificates list here:
> http://www.mozilla.org/projects/security/certs/pending/#SG%20Trust%20Services
>
>
> Summary of Information Gathered and Verified:
> https://bugzilla.mozilla.org/attachment.cgi?id=672856
>
> Noteworthy points:
>
> * The primary documents are the CP documents listed below, which are in
> French. Some sections have been translated into English.
>
> Document Repository: http://www.sgtrustservices.com/entreprise/pc/index.htm
> CP for Authentication and Encryption Certs:
> http://www.sgtrustservices.com/entreprise/pc/authentification/index.htm
> CP for Signing Certs:
> http://www.sgtrustservices.com/entreprise/pc/signature/index.htm
> CP for 2-Star Certs:
> https://www.sgts.rgs2e.sgtrustservices.com/doc/PC/SG_TS_2E_PC_Authentification.pdf
longer working -- their website appears to have changed.
I'll post another update here with the new links soon.
Kathleen
Sylvain
Nov 16, 2012, 5:02:00 AM11/16/12
to mozilla-dev-s...@lists.mozilla.org, mozilla-dev-s...@lists.mozilla.org
Le jeudi 15 novembre 2012 23:32:56 UTC+1, Kathleen Wilson a écrit :
> On 11/15/12 2:15 PM, Kathleen Wilson wrote:
>
> > SG Trust Services has applied to add the �SG TRUST SERVICES RACINE� root
> On 11/15/12 2:15 PM, Kathleen Wilson wrote:
>
>
> > certificate and turn on the Email trust bit.
>
> >
>
> > SG Trust Services is a subsidiary of Groupe SG, which is the high level
>
> > entity of all subsidiaries of Soci�t� G�n�rale, one of the oldest and
> > certificate and turn on the Email trust bit.
>
> >
>
> > SG Trust Services is a subsidiary of Groupe SG, which is the high level
>
>
> > largest banks in France and is a major international financial services
>
> > company. Customers are the general public who make e-Services with banks
>
> > and French government third parties.
>
> >
>
> > The request is documented in the following bug:
>
> > https://bugzilla.mozilla.org/show_bug.cgi?id=662259
>
> >
>
> > And in the pending certificates list here:
>
> > http://www.mozilla.org/projects/security/certs/pending/#SG%20Trust%20Services
>
> >
>
> >
>
> > Summary of Information Gathered and Verified:
>
> > https://bugzilla.mozilla.org/attachment.cgi?id=672856
>
> >
>
> > Noteworthy points:
>
> >
>
> > * The primary documents are the CP documents listed below, which are in
>
> > French. Some sections have been translated into English.
>
> >
>
> > Document Repository: http://www.sgtrustservices.com/entreprise/pc/index.htm
>
> > CP for Authentication and Encryption Certs:
>
> > http://www.sgtrustservices.com/entreprise/pc/authentification/index.htm
>
> > CP for Signing Certs:
>
> > http://www.sgtrustservices.com/entreprise/pc/signature/index.htm
>
> > CP for 2-Star Certs:
>
> > https://www.sgts.rgs2e.sgtrustservices.com/doc/PC/SG_TS_2E_PC_Authentification.pdf
>
>
>
>
>
> Ooops! After posting this I noticed that the document links are no
>
> longer working -- their website appears to have changed.
>
>
>
> I'll post another update here with the new links soon.
>
>
>
> Kathleen
New links are the following :
> > largest banks in France and is a major international financial services
>
> > company. Customers are the general public who make e-Services with banks
>
> > and French government third parties.
>
> >
>
> > The request is documented in the following bug:
>
> > https://bugzilla.mozilla.org/show_bug.cgi?id=662259
>
> >
>
> > And in the pending certificates list here:
>
> > http://www.mozilla.org/projects/security/certs/pending/#SG%20Trust%20Services
>
> >
>
> >
>
> > Summary of Information Gathered and Verified:
>
> > https://bugzilla.mozilla.org/attachment.cgi?id=672856
>
> >
>
> > Noteworthy points:
>
> >
>
> > * The primary documents are the CP documents listed below, which are in
>
> > French. Some sections have been translated into English.
>
> >
>
> > Document Repository: http://www.sgtrustservices.com/entreprise/pc/index.htm
>
> > CP for Authentication and Encryption Certs:
>
> > http://www.sgtrustservices.com/entreprise/pc/authentification/index.htm
>
> > CP for Signing Certs:
>
> > http://www.sgtrustservices.com/entreprise/pc/signature/index.htm
>
> > CP for 2-Star Certs:
>
> > https://www.sgts.rgs2e.sgtrustservices.com/doc/PC/SG_TS_2E_PC_Authentification.pdf
>
>
>
>
>
> Ooops! After posting this I noticed that the document links are no
>
> longer working -- their website appears to have changed.
>
>
>
> I'll post another update here with the new links soon.
>
>
>
> Kathleen
- Index HTTP page : http://www.sgtrustservices.com/home/web/guest/politiquecertifrgs2
- Download link : http://www.sgtrustservices.com/home/c/document_library/get_file?uuid=50b72e0c-4d9e-475d-b2e3-293335d3aa04&groupId=10157
Sylvain
Nov 16, 2012, 5:02:00 AM11/16/12
to mozilla.dev.s...@googlegroups.com, mozilla-dev-s...@lists.mozilla.org
Le jeudi 15 novembre 2012 23:32:56 UTC+1, Kathleen Wilson a écrit :
> On 11/15/12 2:15 PM, Kathleen Wilson wrote:
>
> > SG Trust Services has applied to add the �SG TRUST SERVICES RACINE� root
>
>
> > certificate and turn on the Email trust bit.
>
> >
>
> > SG Trust Services is a subsidiary of Groupe SG, which is the high level
>
> > entity of all subsidiaries of Soci�t� G�n�rale, one of the oldest and
> > certificate and turn on the Email trust bit.
>
> >
>
> > SG Trust Services is a subsidiary of Groupe SG, which is the high level
>
>
> > largest banks in France and is a major international financial services
>
> > company. Customers are the general public who make e-Services with banks
>
> > and French government third parties.
>
> >
>
> > The request is documented in the following bug:
>
> > https://bugzilla.mozilla.org/show_bug.cgi?id=662259
>
> >
>
> > And in the pending certificates list here:
>
> > http://www.mozilla.org/projects/security/certs/pending/#SG%20Trust%20Services
>
> >
>
> >
>
> > Summary of Information Gathered and Verified:
>
> > https://bugzilla.mozilla.org/attachment.cgi?id=672856
>
> >
>
> > Noteworthy points:
>
> >
>
> > * The primary documents are the CP documents listed below, which are in
>
> > French. Some sections have been translated into English.
>
> >
>
> > Document Repository: http://www.sgtrustservices.com/entreprise/pc/index.htm
>
> > CP for Authentication and Encryption Certs:
>
> > http://www.sgtrustservices.com/entreprise/pc/authentification/index.htm
>
> > CP for Signing Certs:
>
> > http://www.sgtrustservices.com/entreprise/pc/signature/index.htm
>
> > CP for 2-Star Certs:
>
> > https://www.sgts.rgs2e.sgtrustservices.com/doc/PC/SG_TS_2E_PC_Authentification.pdf
>
>
>
>
>
> Ooops! After posting this I noticed that the document links are no
>
> longer working -- their website appears to have changed.
>
>
>
> I'll post another update here with the new links soon.
>
>
>
> Kathleen
> > largest banks in France and is a major international financial services
>
> > company. Customers are the general public who make e-Services with banks
>
> > and French government third parties.
>
> >
>
> > The request is documented in the following bug:
>
> > https://bugzilla.mozilla.org/show_bug.cgi?id=662259
>
> >
>
> > And in the pending certificates list here:
>
> > http://www.mozilla.org/projects/security/certs/pending/#SG%20Trust%20Services
>
> >
>
> >
>
> > Summary of Information Gathered and Verified:
>
> > https://bugzilla.mozilla.org/attachment.cgi?id=672856
>
> >
>
> > Noteworthy points:
>
> >
>
> > * The primary documents are the CP documents listed below, which are in
>
> > French. Some sections have been translated into English.
>
> >
>
> > Document Repository: http://www.sgtrustservices.com/entreprise/pc/index.htm
>
> > CP for Authentication and Encryption Certs:
>
> > http://www.sgtrustservices.com/entreprise/pc/authentification/index.htm
>
> > CP for Signing Certs:
>
> > http://www.sgtrustservices.com/entreprise/pc/signature/index.htm
>
> > CP for 2-Star Certs:
>
> > https://www.sgts.rgs2e.sgtrustservices.com/doc/PC/SG_TS_2E_PC_Authentification.pdf
>
>
>
>
>
> Ooops! After posting this I noticed that the document links are no
>
> longer working -- their website appears to have changed.
>
>
>
> I'll post another update here with the new links soon.
>
>
>
> Kathleen
Kathleen Wilson
Mar 14, 2013, 2:41:42 PM3/14/13
to mozilla-dev-s...@lists.mozilla.org
On 11/15/12 2:32 PM, Kathleen Wilson wrote:
> On 11/15/12 2:15 PM, Kathleen Wilson wrote:
>> SG Trust Services has applied to add the “SG TRUST SERVICES RACINE” root
>> certificate and turn on the Email trust bit.
>>
>
> On 11/15/12 2:15 PM, Kathleen Wilson wrote:
>> SG Trust Services has applied to add the “SG TRUST SERVICES RACINE” root
>> certificate and turn on the Email trust bit.
>>
>
> Ooops! After posting this I noticed that the document links are no
> longer working -- their website appears to have changed.
>
> I'll post another update here with the new links soon.
All, I apologize for my delay in returning to this request. I am
> longer working -- their website appears to have changed.
>
> I'll post another update here with the new links soon.
re-posting all of the information here with the updated links.
SG Trust Services has applied to add the “SG TRUST SERVICES RACINE” root
certificate and turn on the Email trust bit.
SG Trust Services is a subsidiary of Groupe SG, which is the high level
entity of all subsidiaries of Société Générale, one of the oldest and
largest banks in France and is a major international financial services
company. Customers are the general public who make e-Services with banks
and French government third parties.
The request is documented in the following bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=662259
And in the pending certificates list here:
http://www.mozilla.org/projects/security/certs/pending/#SG%20Trust%20Services
Summary of Information Gathered and Verified:
Noteworthy points:
* The primary documents are the CP documents, which are in French. Some
sections have been translated into English.
Document Repository:
http://www.sgtrustservices.com/home/en/web/guest/politiquecertifrgs2
Document Repository:
On this page there is a link called “Download the RGS ** certificate
policies” which provides a zip file that contains the related
certificate policies. Each CP describes a specific certificate's usage.
- SGTS 2E_PC_Authentification_et_signature 1.2.pdf (NonRepudiation and
DigitalSignature bits are positioned)
- SGTS_2E_PC_Signature 1.2.pdf (NonRepudiation bit is positioned)
- SGTS_2E_PC_Authentification 1.2.pdf (DigitalSignature bit is positioned)
- SGTS_2E_PC_Racine 1.2.pdf
English translations: https://bugzilla.mozilla.org/attachment.cgi?id=702296
The paragraphs that have been translated are the same for all of the CP
documents.
The “SG TRUST SERVICES RACINE” root has two internally-operated
intermediate certificates, one for authentication certificates and
another for signing certificates.
* CP Section 4.2.3.3 describes the steps to verify and register a
http://www.sgtrustservices.com/home/chaineconfiance
* Example Certificates provided in the bug
https://bugzilla.mozilla.org/show_bug.cgi?id=662259#c39
* CRL
http://crl.sgtrustservices.com/racine-GroupeSG/LatestCRL
http://crl.sgtrustservices.com/SGTS-2Etoiles/LatestCRL (NextUpdate: 6 days)
* OCSP not provided
(Note: This request is to turn on the Email trust bit only, so the CAB
Forum Baseline requirements don’t apply.)
* Audit: Audits are performed against the ETSI TS 102 042 criteria by
LSTI, and a list of the certified certificate providers is provided on
the LSTI website.
http://www.lsti-certification.fr/index.php?option=com_content&view=article&id=54&Itemid=14
Annual surveillance audits are also performed. The last one was done in
December 2012.
* Potentially Problematic Practices
(http://wiki.mozilla.org/CA:Problematic_Practices):
** Delegation of email validation to third parties, as described above.
This begins the discussion of the request from SG Trust Services to add
* Potentially Problematic Practices
(http://wiki.mozilla.org/CA:Problematic_Practices):
** Delegation of email validation to third parties, as described above.
the “SG TRUST SERVICES RACINE” root certificate and turn on the Email
trust bit.
trust bit.
Kathleen Wilson
Apr 4, 2013, 6:40:31 PM4/4/13
to mozilla-dev-s...@lists.mozilla.org
> SG Trust Services has applied to add the �SG TRUST SERVICES RACINE� root
> policies� which provides a zip file that contains the related
If not, I will close this discussion and recommend approval in the bug.
Thanks,
Kathleen
> certificate and turn on the Email trust bit.
>
> SG Trust Services is a subsidiary of Groupe SG, which is the high level
> entity of all subsidiaries of Soci�t� G�n�rale, one of the oldest and
>
> SG Trust Services is a subsidiary of Groupe SG, which is the high level
> largest banks in France and is a major international financial services
> company. Customers are the general public who make e-Services with banks
> and French government third parties.
>
> The request is documented in the following bug:
> https://bugzilla.mozilla.org/show_bug.cgi?id=662259
>
> And in the pending certificates list here:
> http://www.mozilla.org/projects/security/certs/pending/#SG%20Trust%20Services
>
>
> Summary of Information Gathered and Verified:
> https://bugzilla.mozilla.org/attachment.cgi?id=725033
>
> Noteworthy points:
>
> * The primary documents are the CP documents, which are in French. Some
> sections have been translated into English.
>
> Document Repository:
> http://www.sgtrustservices.com/home/en/web/guest/politiquecertifrgs2
> On this page there is a link called �Download the RGS ** certificate
> company. Customers are the general public who make e-Services with banks
> and French government third parties.
>
> The request is documented in the following bug:
> https://bugzilla.mozilla.org/show_bug.cgi?id=662259
>
> And in the pending certificates list here:
> http://www.mozilla.org/projects/security/certs/pending/#SG%20Trust%20Services
>
>
> Summary of Information Gathered and Verified:
> https://bugzilla.mozilla.org/attachment.cgi?id=725033
>
> Noteworthy points:
>
> * The primary documents are the CP documents, which are in French. Some
> sections have been translated into English.
>
> Document Repository:
> http://www.sgtrustservices.com/home/en/web/guest/politiquecertifrgs2
> policies� which provides a zip file that contains the related
> certificate policies. Each CP describes a specific certificate's usage.
> - SGTS 2E_PC_Authentification_et_signature 1.2.pdf (NonRepudiation and
> DigitalSignature bits are positioned)
> - SGTS_2E_PC_Signature 1.2.pdf (NonRepudiation bit is positioned)
> - SGTS_2E_PC_Authentification 1.2.pdf (DigitalSignature bit is positioned)
> - SGTS_2E_PC_Racine 1.2.pdf
>
> English translations: https://bugzilla.mozilla.org/attachment.cgi?id=702296
> The paragraphs that have been translated are the same for all of the CP
> documents.
>
> The �SG TRUST SERVICES RACINE� root has two internally-operated
> - SGTS 2E_PC_Authentification_et_signature 1.2.pdf (NonRepudiation and
> DigitalSignature bits are positioned)
> - SGTS_2E_PC_Signature 1.2.pdf (NonRepudiation bit is positioned)
> - SGTS_2E_PC_Authentification 1.2.pdf (DigitalSignature bit is positioned)
> - SGTS_2E_PC_Racine 1.2.pdf
>
> English translations: https://bugzilla.mozilla.org/attachment.cgi?id=702296
> The paragraphs that have been translated are the same for all of the CP
> documents.
>
> intermediate certificates, one for authentication certificates and
> another for signing certificates.
>
> The request is to turn on the Email trust bit.
Does anyone have any comments, questions, or concerns about this request?
> another for signing certificates.
>
> The request is to turn on the Email trust bit.
If not, I will close this discussion and recommend approval in the bug.
Thanks,
Kathleen
Kathleen Wilson
Apr 8, 2013, 4:08:55 PM4/8/13
to mozilla-dev-s...@lists.mozilla.org
On 4/4/13 3:40 PM, Kathleen Wilson wrote:
>> SG Trust Services has applied to add the �SG TRUST SERVICES RACINE� root
>> certificate and turn on the Email trust bit.
>>
>
>> SG Trust Services has applied to add the �SG TRUST SERVICES RACINE� root
>> certificate and turn on the Email trust bit.
>>
>
> Does anyone have any comments, questions, or concerns about this request?
>
> If not, I will close this discussion and recommend approval in the bug.
>
I am closing this discussion, and I will recommend approval in the bug.
>
> If not, I will close this discussion and recommend approval in the bug.
>
https://bugzilla.mozilla.org/show_bug.cgi?id=662259
Any further follow-up on this request should be added directly to the bug.
Thanks,
Kathleen
0 new messages