GlobalSign: CRLs reported in CCADB unavailable
GlobalSign reported that CRLs listed in CCADB were not available. The CA said it was informed by an email to Mozilla Dev Security on 19/04/2023 about CRLs reported in CCADB that were not available, and its compliance team confirmed that 6 reported CRLs were unavailable. GlobalSign stated that 5 of the unavailable CRLs were for expired CAs, and that 1 CRL URL was incorrectly reported in CCADB; it updated the incorrect CRL URL in CCADB. The thread describes that the incorrect URL resulted from a shortname/publishing mismatch when setting up the “DPDHL User CA I5” replacement for “DPDHL User CA I4,” where the CRLs were published with a different filename prefix than expected. GlobalSign also said it deployed daily monitoring to verify availability of CRLs reported in CCADB and would continue monitoring discussions about reporting CRLs for expired CAs. The bug was resolved as FIXED/RESOLVED in the thread, with Mozilla indicating an intent to close it around 3-May-2023 unless further issues arose.
- GlobalSign was notified by email to Mozilla Dev Security about CRLs reported in CCADB that were not available and began investigating.
- GlobalSign updated CCADB for the affected DHL CA and reviewed the reported CRLs, confirming 6 were returning 404.
- GlobalSign reported that daily monitoring for CCADB-reported CRL availability was deployed and requested closure.
- GlobalSign nv-sa — Reported reproduction steps, confirmed 6 unavailable CRLs (5 for expired CAs) and that 1 incorrect CRL URL was updated in CCADB, with a full incident report planned by 24 April 2023.
- GlobalSign nv-sa — Provided a detailed explanation of how the incorrect CRL URL was populated in CCADB and why it was not detected until then.
- GlobalSign nv-sa — Stated daily monitoring to verify availability of CRLs reported in CCADB was deployed and asked to close the issue if no further questions remained.
- Mozilla representative — Indicated intent to close the bug on or about 3-May-2023 unless there were other issues or items to discuss.