Need remove OISTE WISeKey Global Root GA CA?

[westm...@gmail.com]

https://bugzilla.mozilla.org/show_bug.cgi?id=1172819#c9

I tested the root certificate is OISTE WISeKey Global Root GA CA on gov.sc websites and it does not work anymore: red SSL icon is displayed.

I contacted with WISeKey via in...@wisekey.com one week ago on this issue, but the answer was not received.

[Wayne Thayer]

The test site for the root referenced in bug 1172819 is working fine in
Firefox: https://gbvalidssl.hightrusted.com/

I am not able to locate any gov.sc websites properly configured for HTTPS
to test.

- Wayne

> _______________________________________________
> dev-security-policy mailing list
> dev-secur...@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-security-policy
>

[pfuen...@gmail.com]

I sent yesterday an answer to this in behalf of Wisekey but it’s not been published.

We can control if all customers configure properly their servers. The only one I found (https://mail.egov.sc/OWA) seems to be OK.

[pfuen...@gmail.com]

Sorry, obviously I meant "we can't control..."

It seems that the address I used yesterday to answer is not enabled in this list. What I said yesterday was to state the following:

1. The contact information for WISeKey certification services is the specified in our CPS and in the CCADB. The address mentioned by this gentleman is irrelevant to the CA activities.
2. The test sites for our Roots are specified in the CCADB. In particular for this Root is https://gavalidssl.hightrusted.com. Al those are working
3. We can't control how our customers configure their servers, but if they need help, the authorized technical contact can use our customer support (and as it happens, the site I found to test is working)

And I also said that I consider the post and title quite inappropriate.

Thanks and regards,
Pedro

[westm...@gmail.com]

Pedro,
The link in the first post says that the root OISTE WISeKey Global Root GB CA will replace OISTE WISeKey GA CA after adding "GB CA" in Mozilla Root Store. Now the third root "GC CA" is under consideration...
I'm sorry if I misunderstood something.

Andrew

[pfuen...@gmail.com]

Dear Andrey,
In the future GB will replace GA, and GC is ECC.
This replacement means that new SubCAs will be under GB, but GA must stay alive as long as there are active CAs under it, which will be still some years from now.
Best,
Pedro