← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #1649943
Certificate Problem Report
Firmaprofesional: Incorrect OCSP Delegated Responder Certificate
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
AI Summary
The case involves Firmaprofesional issuing OCSP Delegated Responder certificates without the required 'id-pkix-ocsp-nocheck' response. This was reported by Ryan Sleevi and led to a detailed discussion about the implications and security risks associated with the certificates. Firmaprofesional acknowledged the issue and provided an incident report outlining their awareness and response timeline. They asserted that the main security issue does not affect them due to their control over the keys involved, but they committed to reissuing certificates without the offending EKU and to revoking the problematic ones. The case was resolved with the certificates being fixed and a plan for future compliance established.
Chronology
- Issue reported to Mozilla's security policy mailing list.
- Firmaprofesional publicly acknowledged the issue.
- Firmaprofesional outlined steps to resolve the issue.
- Firmaprofesional committed to issuing new certificates without the offending EKU.
- Bug closed after resolution.
Participants
Ryan Sleevi
chemalogo
External References
Similar Local Cases
Firmaprofesional: Failure to revoke ICAs within 7 days: OCSP EKU
Firmaprofesional: Non-audited, non-technically-constrained intermediate certificates
DigiCert: Incorrect OCSP Delegated Responder Certificate
Atos: Incorrect OCSP Delegated Responder Certificate
GlobalSign: Incorrect OCSP Delegated Responder Certificate
Actalis: Incorrect OCSP Delegated Responder Certificate
QuoVadis: Incorrect OCSP Delegated Responder Certificate
SECOM: Incorrect OCSP Delegated Responder Certificate