1239685 - firefox-aurora-stub is 404 on Windows XP

Status: RESOLVED FIXED

(Webtools :: Bouncer, defect)

Description

[Alex Gibson [:agibson]]

STR:

1.) On a Windows XP machine (I tested using IE8), visit: https://www.mozilla.org/en-US/firefox/developer/
2.) Click on the green "Free Download" button

Expected results:

File download should be received

Actual results: 

Link is 404: https://download.mozilla.org/?product=firefox-aurora-stub&os=win&lang=en-US

Comment 1

[Jeremy Orem [:oremj]]

The cause of this is https://github.com/mozilla-services/go-bouncer/commit/0da12366044e1bef9be4205612b70253520fa976#diff-31a4a7824225629df071a1cba8b785d5R297

Comment 2

[Josh Mize [:jgmize]]

More context: the stub installer will not work on XP < SP3 and we can't detect service packs reliably, so we need to always serve the full installer-- see bug 1234874. Unfortunately the firefox-aurora-ssl product does not appear to exist in the bouncer DB (I say "appear to" because I don't have direct access to look at the bouncer DB myself, but the 404 is a pretty clear indication that this is the case). In order to enable aurora downloads for older XP we would need a firefox-aurora-ssl product in bouncer pinned to the last version signed with SHA1, similar to how we did for release and beta. :oremj is that something you could take care of fairly easily?

Comment 3

[Jeremy Orem [:oremj]]

Releng will need to add any products to bouncer.

Rail, do we want to add a firefox-aurora-sha1 (not sure if that's the right name) product to bouncer?

Comment 4

[Rail Aliiev [:rail]]

Yeah, we can add them to bouncer, the binaries are at https://archive.mozilla.org/pub/firefox/releases/sha1-installers/

Let me me add them.

Comment 5

[Rail Aliiev [:rail]]

I added the following products for "win" and "win64" (just in case) to bouncer:

firefox-aurora-sha1 (Dev Edition)
firefox-nightly-sha1 (Nightly)

Sentry should pick them up shortly

Comment 6

[Rail Aliiev [:rail]]

\o/
$ curl -sI "http://download.mozilla.org/?product=Firefox-aurora-sha1&os=win64&lang=en-US" | grep ^Location
Location: http://download.cdn.mozilla.net/pub/firefox/releases/sha1-installers/aurora/firefox-45.0a2.en-US.win64.installer.exe

Comment 7

[Alex Gibson [:agibson]]

(In reply to Rail Aliiev [:rail] from comment #6)
> \o/
> $ curl -sI
> "http://download.mozilla.org/?product=Firefox-aurora-sha1&os=win64&lang=en-
> US" | grep ^Location
> Location:
> http://download.cdn.mozilla.net/pub/firefox/releases/sha1-installers/aurora/
> firefox-45.0a2.en-US.win64.installer.exe

The link is still 404 on XP: https://download.mozilla.org/?product=firefox-aurora-stub&os=win&lang=en-US

:oremj, do we still need to add the redirect in Bouncer to fix this?

Comment 8

[Jeremy Orem [:oremj]]

Yes, we need to patch bouncer for this situation.

Comment 9

[Josh Mize [:jgmize]]

(In reply to Rail Aliiev [:rail] from comment #6)
> $ curl -sI
> "http://download.mozilla.org/?product=Firefox-aurora-sha1&os=win64&lang=en-
> US" | grep ^Location
> Location:
> http://download.cdn.mozilla.net/pub/firefox/releases/sha1-installers/aurora/
> firefox-45.0a2.en-US.win64.installer.exe

:rail shouldn't we use https for the installer location?

Comment 10

[Josh Mize [:jgmize]]

Attachment: bouncer PR 21

Comment 11

[Rail Aliiev [:rail]]

(In reply to Josh Mize [:jgmize] from comment #9)
> (In reply to Rail Aliiev [:rail] from comment #6)
> > $ curl -sI
> > "http://download.mozilla.org/?product=Firefox-aurora-sha1&os=win64&lang=en-
> > US" | grep ^Location
> > Location:
> > http://download.cdn.mozilla.net/pub/firefox/releases/sha1-installers/aurora/
> > firefox-45.0a2.en-US.win64.installer.exe
> 
> :rail shouldn't we use https for the installer location?

I changed the products to SSL-only.

Comment 12

[Jeremy Orem [:oremj]]

Fix will be deployed in bug 1242036

Comment 13

[Jeremy Orem [:oremj]]

The fix has been deployed.