automatic crawler update (12/08/20) - Githubissues

GSA / fpki-guides

This is the old location for the FPKI Playbook. New location below.

https://playbooks.idmanagement.gov/fpki/

Other

31 stars 33 forks source link

automatic crawler update (12/08/20) #802

Closed ryancdickson closed 3 years ago

ryancdickson commented 3 years ago

@idmken and @lachellel

Please find this week's Federal PKI Crawler/Graph update (December 8, 2020 execution).

Live Preview: https://federalist-2147738e-703c-4833-9101-89d779f09ce1.app.cloud.gov/preview/gsa/fpki-guides/20201208-auto-fpki-graph-update/tools/fpkigraph/

Nodes Added or Removed (compared to November 30, 2020 execution):

REMOVED (N1): CN=RAPIDGate-Premier CA, O=Eid Passport,Inc., C=US
REMOVED (N2): CN=RAPIDGate-Premier Device CA, O=Eid Passport,Inc., C=US

Edges Added or Removed (compared to November 30, 2020 execution):

REMOVED (E1): CN=Symantec Class 3 SSP Intermediate CA - G3, OU=Symantec Trust Network, O=Symantec Corporation, C=US -> CN=RAPIDGate-Premier CA, O=Eid Passport,Inc., C=US
REMOVED (E2): CN=Symantec Class 3 SSP Intermediate CA - G3, OU=Symantec Trust Network, O=Symantec Corporation, C=US -> CN=RAPIDGate-Premier Device CA, O=Eid Passport,Inc., C=US
REMOVED (E3): OU=US Treasury Root CA,OU=Certification Authorities, OU=Department of the Treasury, O=U.S. Government, C=US -> OU=Fiscal Service, OU=Department of the Treasury, O=U.S. Government, C=US

Root Cause Analysis:

N1/E1: Certificate expiration. Certificate Details:
- Issuer: CN=Symantec Class 3 SSP Intermediate CA - G3, OU=Symantec Trust Network, O=Symantec Corporation, C=US
- Subject: CN=RAPIDGate-Premier CA, O=Eid Passport,Inc., C=US
- Validity: August 30, 2017 to December 4, 2020
- Serial #: 3c3fe36894d0802c73cb31dd3131490b
- Thumbprint (SHA-1): 9c65e164d3b67d9d1c07d2b60c770756a715b1eb
- Key Size: 2048-bit (RSA)
- Signature Algorithm: SHA-256 with RSA
N2/E2: Certificate expiration. Certificate Details:
- Issuer: CN=Symantec Class 3 SSP Intermediate CA - G3, OU=Symantec Trust Network, O=Symantec Corporation, C=US
- Subject: CN=RAPIDGate-Premier Device CA, O=Eid Passport,Inc., C=US
- Validity: August 30, 2017 to December 4, 2020
- Serial #: 7f70e7ca4d45ea30d19abf0053132f6d
- Thumbprint (SHA-1): e4b64e107921bdf946dc58bd3e2d318e7c7ef36e
- Key Size: 2048-bit (RSA)
- Signature Algorithm: SHA-256 with RSA
E3: Certificate expiration. Certificate Details:
- Issuer: OU=US Treasury Root CA,OU=Certification Authorities, OU=Department of the Treasury, O=U.S. Government, C=US
- Subject: OU=Fiscal Service, OU=Department of the Treasury, O=U.S. Government, C=US
- Validity: December 5, 2010 to December 5, 2020
- Serial #: 4a61d1c9
- Thumbprint (SHA-1): b3b90ede68b05f0096f5aa497787f950fdd8ccad
- Key Size: 2048-bit (RSA)
- Signature Algorithm: SHA-256 with RSA

Other updates:

Though the Crawler runs daily, automatic commits to GitHub now take place on Tuesdays (changed from from Mondays).
Closed #792 after verifying HTTP/LDAP URIs were available.

lachellel commented 3 years ago

@ryancdickson @idmken