Collect the full set of CRL URLs used by GlobalSign EV certificates

This bug requests collecting the full set of CRL URLs that provide revocation information for EV certificates issued by GlobalSign. The reporter stated that Mozilla needs these CRL URLs for EV revocation checking. GlobalSign confirmed that it uses full CRLs and indicated that, at the time of the thread, there is currently only one CRL URL in use: http://crl.globalsign.net/ExtendVal1.crl. A participant objected to the approach and argued that Mozilla should implement CRL fetching for all CAs, noting that code appears to exist. Another participant responded that CRLDP support was expected to reach a stable state within months and that interim measures would be rolled back once proper CRLDP support is available. The bug is marked RESOLVED with resolution FIXED.

1. 2009-02-06 Bug opened to gather the CRL URLs used for revocation information for GlobalSign EV certificates.
2. 2009-02-06 GlobalSign confirmed the EV CRL usage and provided the CRL URL(s) in use.
3. 2009-02-06 Discussion occurred about Mozilla implementing CRL fetching and whether a roadmap/plan existed.

1. 2009-02-06 Kuix representative — The reporter said Mozilla needs the URLs for all CRLs that provide revocation information for EV certs.
2. 2009-02-06 Johnath representative — Johnath asked whether the bug summary was meant to be GlobalSign-specific.
3. 2009-02-06 Johnath representative — Johnath acknowledged it is GlobalSign-specific based on other bugs.
4. 2009-02-06 Johnath representative — Johnath reported that GlobalSign confirmed it uses full CRLs and that only one CRL is currently used, providing http://crl.globalsign.net/ExtendVal1.crl.
5. 2009-02-06 Startcom representative — Eddy objected to the approach and suggested Mozilla should implement CRL fetching for all CAs, stating code exists and there are no patent problems.
6. 2009-02-06 Johnath representative — Johnath replied that CRLDP support was expected to become stable within months and that interim measures would be rolled back once CRLDP support is available.
7. 2009-02-06 Startcom representative — Eddy asked whether there is a road-map or plan.