Remove the StartCom/WoSign whitelist

Remove the StartCom/WoSign whitelist

This fully removes trust in WoSign and StartCom, as announced at https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html

BUG=731838
Review-Url: https://codereview.chromium.org/2927383002
Cr-Commit-Position: refs/heads/master@{#478768}
Committed: https://chromium.googlesource.com/chromium/src/+/8c640b21a3e2c560e33a5a2f4b186b87fa40301b

[Ryan Sleevi, 2017-06-09 19:56:02]

rsleevi@chromium.org changed reviewers:
+ awhalley@chromium.org

[Ryan Sleevi, 2017-06-09 19:56:03]

Andrew: For your review
Adrienne: FYI

[Ryan Sleevi, 2017-06-09 19:56:32]

Description was changed from

==========
Remove the StartCom/WoSign whitelist

BUG=731838
==========

to

==========
Remove the StartCom/WoSign whitelist

This fully removes trust in WoSign and StartCom, as announced at
https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html

BUG=731838
==========

[awhalley, 2017-06-12 18:31:29]

lgtm

https://codereview.chromium.org/2927383002/diff/20001/net/cert/cert_verify_pr...
File net/cert/cert_verify_proc_blacklist.inc (right):

https://codereview.chromium.org/2927383002/diff/20001/net/cert/cert_verify_pr...
net/cert/cert_verify_proc_blacklist.inc:22: //
c7ba6567de93a798ae1faa791e712d378fae1f93c4397fea441bb7cbe6fd5995.pem
Note to self: StartCom Certification Authority G2

https://codereview.chromium.org/2927383002/diff/20001/net/cert/cert_verify_pr...
net/cert/cert_verify_proc_blacklist.inc:42: //
d487a56f83b07482e85e963394c1ecc2c9e51d0903ee946b02c301581ed99e16.pem
Note to self: Certification Authority of WoSign G2

https://codereview.chromium.org/2927383002/diff/20001/net/cert/cert_verify_pr...
net/cert/cert_verify_proc_blacklist.inc:72: //
8b45da1c06f791eb0cabf26be588f5fb23165c2e614bf885562d0dce50b29b02.pem
Note to self: CA WoSign ECC Root

https://codereview.chromium.org/2927383002/diff/20001/net/cert/cert_verify_pr...
net/cert/cert_verify_proc_blacklist.inc:96: //
7d8ce822222b90c0b14342c7a8145d1f24351f4d1a1fe0edfd312ee73fb00149.pem
Note to self: Class 1 Primary CA

https://codereview.chromium.org/2927383002/diff/20001/net/cert/cert_verify_pr...
net/cert/cert_verify_proc_blacklist.inc:141: //
4b22d5a6aec99f3cdb79aa5ec06838479cd5ecba7164f7f22dc1d65f63d85708.pem
Note to self: Certification Authority of WoSign

https://codereview.chromium.org/2927383002/diff/20001/net/cert/cert_verify_pr...
net/cert/cert_verify_proc_blacklist.inc:145: //
d6f034bd94aa233f0297eca4245b283973e447aa590f310c77f48fdf83112254.pem
Note to self: CA 沃通根证书

https://codereview.chromium.org/2927383002/diff/20001/net/cert/cert_verify_pr...
net/cert/cert_verify_proc_blacklist.inc:158: //
e17890ee09a3fbf4f48b9c414a17d637b7a50647e9bc752322727fcc1742a911.pem
Note to self: StartCom Certification Authority (two certs, one key)

[Ryan Sleevi, 2017-06-12 18:33:30]

The CQ bit was checked by rsleevi@chromium.org

[commit-bot: I haz the power, 2017-06-12 18:34:26]

CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-06-12 18:43:38]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2017-06-12 18:43:39]

Try jobs failed on following builders:
  android_cronet on master.tryserver.chromium.android (JOB_FAILED,
https://build.chromium.org/p/tryserver.chromium.android/builders/android_cron...)
  mac_chromium_rel_ng on master.tryserver.chromium.mac (JOB_FAILED,
http://build.chromium.org/p/tryserver.chromium.mac/builders/mac_chromium_rel_...)

[Ryan Sleevi, 2017-06-12 18:51:30]

The CQ bit was checked by rsleevi@chromium.org

[Ryan Sleevi, 2017-06-12 18:51:31]

The patchset sent to the CQ was uploaded after l-g-t-m from
awhalley@chromium.org
Link to the patchset: https://codereview.chromium.org/2927383002/#ps60001
(title: "Fix BUILD.gn")

[commit-bot: I haz the power, 2017-06-12 18:52:06]

CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-06-12 19:02:35]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2017-06-12 19:02:36]

Try jobs failed on following builders:
  android_cronet on master.tryserver.chromium.android (JOB_FAILED,
https://build.chromium.org/p/tryserver.chromium.android/builders/android_cron...)
  cast_shell_linux on master.tryserver.chromium.linux (JOB_FAILED,
http://build.chromium.org/p/tryserver.chromium.linux/builders/cast_shell_linu...)
  mac_chromium_compile_dbg_ng on master.tryserver.chromium.mac (JOB_FAILED,
http://build.chromium.org/p/tryserver.chromium.mac/builders/mac_chromium_comp...)

[Ryan Sleevi, 2017-06-12 19:05:31]

The CQ bit was checked by rsleevi@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2017-06-12 19:06:00]

Dry run: CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-06-12 20:45:17]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2017-06-12 20:45:18]

Dry run: This issue passed the CQ dry run.

[Ryan Sleevi, 2017-06-12 20:45:54]

The CQ bit was checked by rsleevi@chromium.org

[Ryan Sleevi, 2017-06-12 20:45:54]

The patchset sent to the CQ was uploaded after l-g-t-m from
awhalley@chromium.org
Link to the patchset: https://codereview.chromium.org/2927383002/#ps80001
(title: "Headers")

[commit-bot: I haz the power, 2017-06-12 20:46:21]

CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[Ryan Sleevi, 2017-06-12 20:47:26]

The CQ bit was unchecked by rsleevi@chromium.org

[Ryan Sleevi, 2017-06-12 20:47:58]

rsleevi@chromium.org changed reviewers:
+ davidben@chromium.org

[Ryan Sleevi, 2017-06-12 20:47:58]

davidben: For sanity checking the //net cleanup :)

[davidben, 2017-06-12 21:07:57]

lgtm

[Ryan Sleevi, 2017-06-12 21:10:11]

The CQ bit was checked by rsleevi@chromium.org

[commit-bot: I haz the power, 2017-06-12 21:10:48]

CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-06-12 21:17:38]

CQ is committing da patch.

Bot data: {"patchset_id": 80001, "attempt_start_ts": 1497301811708560,
"parent_rev": "74520997b5744e0c8a1684cc9cf0b18f9f60926c", "commit_rev":
"8c640b21a3e2c560e33a5a2f4b186b87fa40301b"}

[commit-bot: I haz the power, 2017-06-12 21:17:48]

Description was changed from

==========
Remove the StartCom/WoSign whitelist

This fully removes trust in WoSign and StartCom, as announced at
https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html

BUG=731838
==========

to

==========
Remove the StartCom/WoSign whitelist

This fully removes trust in WoSign and StartCom, as announced at
https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html

BUG=731838

Review-Url: https://codereview.chromium.org/2927383002
Cr-Commit-Position: refs/heads/master@{#478768}
Committed:
https://chromium.googlesource.com/chromium/src/+/8c640b21a3e2c560e33a5a2f4b18...
==========

[commit-bot: I haz the power, 2017-06-12 21:17:50]

Committed patchset #5 (id:80001) as
https://chromium.googlesource.com/chromium/src/+/8c640b21a3e2c560e33a5a2f4b18...