GTS intermediates disappeared from MozillaIntermediateCertsCSVReport

154 views
Skip to first unread message

Filippo Valsorda

unread,
Jan 26, 2023, 4:49:21 PM1/26/23
to CCADB Public
Hello,

It looks like a number of active GTS intermediates (as well as a couple others, which might or might not be related, full list below), including the one in the chain served by google.com, have disappeared from the list served at https://ccadb-public.secure.force.com/mozilla/MozillaIntermediateCertsCSVReport

This happened in the last two days. I have noticed because my github.com/FiloSottile/intermediates module tried to self-update, but failed a test that checks if it can connect to google.com while discarding the server-sent certificates. https://github.com/FiloSottile/intermediates/actions/runs/4011757973/jobs/6889623737

Cheers,
Filippo

CN=Certum Trusted Network CA 2; OU=Certum Certification Authority; O=Unizeto Technologies S.A.; C=PL
CN=GIAG4x; O=Google Trust Services LLC; C=US
CN=GTS CA 1C3; O=Google Trust Services LLC; C=US
CN=GTS CA 1D4; O=Google Trust Services LLC; C=US
CN=GTS CA 1P5; O=Google Trust Services LLC; C=US
CN=GTS Root R1; O=Google Trust Services LLC; C=US
CN=GTS Y1; O=Google Trust Services LLC; C=US
CN=GTS Root R2; O=Google Trust Services LLC; C=US
CN=GTS Y2; O=Google Trust Services LLC; C=US
CN=GTS Root R3; O=Google Trust Services LLC; C=US
CN=GTS Y3; O=Google Trust Services LLC; C=US
CN=GTS CA 2A1; O=Google Trust Services LLC; C=US
CN=GTS Root R4; O=Google Trust Services LLC; C=US
CN=GTS Y4; O=Google Trust Services LLC; C=US
CN=GIAG4 ECC; O=Google Trust Services LLC; C=US
CN=GlobalSign; OU=GlobalSign ECC Root CA - R4; O=GlobalSign

Amir Omidi

unread,
Jan 26, 2023, 4:56:17 PM1/26/23
to CCADB Public, Filippo Valsorda
Hi Filippo,

Thanks for reporting this! We're looking into it and will provide an update ASAP.

Cheers!
Amir

Kathleen Wilson

unread,
Jan 26, 2023, 5:20:47 PM1/26/23
to pub...@ccadb.org
Thank for bringing this to my attention. I marked the old GTS roots as removed (which they were), but the intermediate certs are probably in the CCADB as under the old roots, so I will need to re-parent them. (CCADB doesn't handle this situation well -- only allows one parent.)

Thanks,
Kathleen
--
You received this message because you are subscribed to the Google Groups "CCADB Public" group.
To unsubscribe from this group and stop receiving emails from it, send an email to public+un...@ccadb.org.
To view this discussion on the web visit https://groups.google.com/a/ccadb.org/d/msgid/public/fe06eb63-274a-4423-bd76-607ce4a429b0n%40ccadb.org.

Amir Omidi

unread,
Jan 26, 2023, 5:28:13 PM1/26/23
to CCADB Public, kwi...@mozilla.com
Thank you Kathleen!

Kathleen Wilson

unread,
Jan 26, 2023, 5:55:39 PM1/26/23
to CCADB Public
I have updated the GTS cert hierarchy info in the CCADB.
Please let me know if you notice anything else that needs to be updated therein.

Thanks,
Kathleen
Reply all
Reply to author
Forward
0 new messages