1264675 - Add content signature root hash to security preferences

Status: RESOLVED FIXED

(Core :: Security: PSM, defect)

Description

[Mark Goodwin [:mgoodwin]]

Pref is security.content.signature.root_hash

Comment 1

[Mark Goodwin [:mgoodwin]]

Production root cert sha256Fingerprint is:
97:E8:BA:9C:F1:2F:B3:DE:53:CC:42:A4:E6:57:7E:D6:4D:F4:93:C2:47:B4:14:FE:A0:36:81:8D:38:23:56:0E

Comment 2

[Mark Goodwin [:mgoodwin]]

Attachment: MozReview Request: Bug 1264675 - Add content signature root hash to security preferences r?keeler,r?ulfr

Review commit: https://reviewboard.mozilla.org/r/46727/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/46727/

Comment 3

[Mark Goodwin [:mgoodwin]]

https://treeherder.mozilla.org/#/jobs?repo=try&revision=bd93f000d2ac

Comment 4

[Julien Vehent]

Comment on attachment 8741744 [details]
MozReview Request: Bug 1264675 - Add content signature root hash to security preferences r?keeler,r?ulfr

Looks good to me, I get the same hash on my local copy.

$ openssl x509 -in root-ca-production-amo.crt -outform der | sha256sum 97e8ba9cf12fb3de53cc42a4e6577ed64df493c247b414fea036818d3823560e

Comment 5

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Comment on attachment 8741744 [details]
MozReview Request: Bug 1264675 - Add content signature root hash to security preferences r?keeler,r?ulfr

https://reviewboard.mozilla.org/r/46727/#review43389

Comment 6

[Julien Vehent]

https://reviewboard.mozilla.org/r/46727/#review43395

Comment 7

[Mark Goodwin [:mgoodwin]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/17deb7d01e4e368e9fc06935925eb50d892ebbb6
Bug 1264675 - Add content signature root hash to security preferences r=keeler,r=ulfr

Comment 8

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://hg.mozilla.org/mozilla-central/rev/17deb7d01e4e