Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8021791

Request to add Certinomis Root CA into cacert JRE/JDK

XMLWordPrintable

    • Icon: Enhancement Enhancement
    • Resolution: Not an Issue
    • Icon: P4 P4
    • None
    • 7
    • security-libs

      A DESCRIPTION OF THE REQUEST :
      • Certinomis Certificate Authority is interested in including its root certificates in Java SE;

      • Company name and address
                  Certinomis
                  10 avenue Charles de Gaulle
                  94673 Charenton Le Pont Cedex
                  France

      • Company web page address (URL)
      www.certinomis.fr

      • Technical and business contact (first and last name, e-mail address, and phone number)
      Business
                  François Chassery - Directeur Commercial
                  ###@###.###
                  +33 (0)1 56 29 72 62
      Technical
                  Franck Leroy - Directeur Technique
                  ###@###.###
                  +33 (0)1 56 29 72 48

      • Root certificates that you would like to submit (in PEM or DER-encoded format) and their usage, e.g. code signing and SSL

      http://www.certinomis.com/publi/cer/ACR_Certinomis.cer

      • Revocation support , e.g. CRL and OCSP
      Only CRL, all our CRLdp : http://www.certinomis.fr/documents-et-liens/nos-crl

      • Pointer to Certification Practices Statement (URL)
      CP are available online:
      http://www.certinomis.fr/documents-et-liens/nos-politiques

      CPS :
      http://www.certinomis.com/publi/rgs/PR_AE_OpC_110075.pdf


      • WebTrust Certification or equivalent audit report
      We are audited by LSTI with ETSI TS 101 456 certification.
      See LSTI web site : http://www.lsti-certification.fr/images/stories/master_en_exel_maiv1.xlsx.pdf

      • How root certificates provide value to Java SE users
      Certinomis is part of “La Poste” the French Postal Service.
      Certinomis exits and sells certificates since 2000.
      French people need a Local Trust CA, and certinomis delivers about 8000 certificates a year.
      We issue certificate for TLS server / signing server, to person for authentication and signing.
      We do not deliver code signing certificate.
      Essentially in France as we use the French Postal Network to deliver certificate in ‘Face-to-face’.
      For all public; professional (e-gov procurement, e-invoices, online store …) or personal (signing email…).

      Most of Certinomis customers uses java applets in their browser but they have to add manually the Certinomis ROOT CA.

      If Certinomis ROOT CA were already present in the JVM, French customers will be more confident using Java for secure internet.



      Best regards
      Franck Leroy - CTO
      Certinomis


      JUSTIFICATION :
      Java application can not connect to https server using a Certinomis certificate without a warning.

            Unassigned Unassigned
            ndcosta Nelson Dcosta (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported: