GoDaddy intermediate CA not included in Mozilla CA bundle

The bug report describes an SSL handshake failure when using cURL against a webserver configured with a valid GoDaddy class 2 certificate. The reporter attributes the failure to a missing GoDaddy intermediate CA certificate in the Mozilla CA bundle (as used by Linux ca-certificates), which they say causes the certificate chain to be reported as untrusted. The reporter asks Mozilla to add the GoDaddy intermediate certificate to the bundle and provides links to GoDaddy’s CA repository and the direct intermediate certificate URL. Mozilla staff responded that intermediate certificates are not included in the Mozilla root store/bundle and that servers should provide the full certificate chain. The bug was resolved as INVALID, with the rationale that the issue is due to server configuration rather than a Mozilla trust-store problem.

1. 2011-12-07 A third party reported that GoDaddy class 2 certificates fail SSL handshakes because the GoDaddy intermediate certificate is missing from the Mozilla CA bundle.

1. 2011-12-07 Community commenter — Reported that cURL SSL handshakes fail because the GoDaddy intermediate CA certificate is missing from the Mozilla CA bundle and requested it be added, including repository and direct certificate links.
2. 2011-12-07 Mit representative — Asked who owns the CA bundle and what the Mozilla CA bundle is.
3. 2011-12-07 Mversen representative — Explained that intermediate certificates are not included in the Mozilla CA bundle/root store and that servers must send the full chain.
4. 2011-12-07 Mozilla representative — Confirmed Mozilla does not include intermediate certificates, and stated CAs should advise customers to configure servers with the full certificate chain.