Enable EV for AC Camerfirma SA

net/base/ev_root_ca_metadata.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/ev_root_ca_metadata.h"
 
 #if defined(USE_NSS) || defined(OS_IOS)
 #include <cert.h>
 #include <pkcs11n.h>
 #include <secerr.h>
@@ skipping 22 matching lines @@
 
   // The SHA-1 fingerprint of the root CA certificate, used as a unique
   // identifier for a root CA certificate.
   SHA1HashValue fingerprint;
 
   // The EV policy OIDs of the root CA.
   const char policy_oids[kMaxOIDsPerCA][kMaxOIDLength];
 };
 
 static const EVMetadata ev_root_ca_metadata[] = {
+  // AC Camerfirma S.A. Chambers of Commerce Root - 2008
+  // https://www.camerfirma.com

[wtc, 2013/03/22 22:10:33]

While inspecting the cert chain of this test site, I found
that neither Firefox nor Linux Chrome displays the OID
2.5.29.32.0 in the Certificate Policies extension as
"anyPolicy". Sigh.

+  { { { 0x78, 0x6a, 0x74, 0xac, 0x76, 0xab, 0x14, 0x7f, 0x9c, 0x6a,
+        0x30, 0x50, 0xba, 0x9e, 0xa8, 0x7e, 0xfe, 0x9a, 0xce, 0x3c } },
+    { // AC Camerfirma uses the last two arcs to track how the private key is
+      // managed - the effective verification policy is the same.
+      "1.3.6.1.4.1.17326.10.14.2.1.2",
+      "1.3.6.1.4.1.17326.10.14.2.2.2", },
+  },
+  // AC Camerfirma S.A. Global Chambersign Root - 2008
+  // https://server2.camerfirma.com:8082
+  { { { 0x4a, 0xbd, 0xee, 0xec, 0x95, 0x0d, 0x35, 0x9c, 0x89, 0xae,
+        0xc7, 0x52, 0xa1, 0x2c, 0x5b, 0x29, 0xf6, 0xd6, 0xaa, 0x0c } },
+    { // AC Camerfirma uses the last two arcs to track how the private key is
+      // managed - the effective verification policy is the same.
+      "1.3.6.1.4.1.17326.10.8.12.1.2",
+      "1.3.6.1.4.1.17326.10.8.12.2.2", },
+  },
   // AddTrust External CA Root
   // https://addtrustexternalcaroot-ev.comodoca.com
   { { { 0x02, 0xfa, 0xf3, 0xe2, 0x91, 0x43, 0x54, 0x68, 0x60, 0x78,
         0x57, 0x69, 0x4d, 0xf5, 0xe4, 0x5b, 0x68, 0x85, 0x18, 0x68 } },
     {
       "1.3.6.1.4.1.6449.1.2.1.5.1",
       // This is the Network Solutions EV OID. However, this root
       // cross-certifies NetSol and so we need it here too.
       "1.3.6.1.4.1.782.1.2.1.8.1",
     },
@@ skipping 473 matching lines @@
       ev_policy_[metadata.fingerprint].push_back(policy);
       policy_oids_.insert(policy);
     }
   }
 #endif
 }
 
 EVRootCAMetadata::~EVRootCAMetadata() { }
 
 }  // namespace net