1335466 - regenerate CA telemetry hash table (RootHashes.inc)

Status: RESOLVED FIXED

(Core :: Security: PSM, defect)

Description

[Peter Bowen]

The root CA telemetry hash table hasn't been updated in a while. A number of changes have happened to the list of root CAs since June 2016.

Comment 1

[Peter Bowen]

Note that this is basically a repeat of bug 1266563.

Comment 2

[J.C. Jones [:jcj] (he/they)]

Attachment: Bug 1335466 - Regenerate the CA RootHashes.inc

This is a maintenance re-run since Firefox 50, to include new roots.

Review commit: https://reviewboard.mozilla.org/r/108880/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/108880/

Comment 3

[Dana Keeler (she/her) [:keeler]]

Comment on attachment 8832684 [details]
Bug 1335466 - Regenerate the CA RootHashes.inc

https://reviewboard.mozilla.org/r/108880/#review110116

Great - thanks.

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/c32b0727b37b
Regenerate the CA RootHashes.inc r=keeler

Comment 5

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/c32b0727b37b

Comment 6

[J.C. Jones [:jcj] (he/they)]

Comment on attachment 8832684 [details]
Bug 1335466 - Regenerate the CA RootHashes.inc

Approval Request Comment
[Feature/Bug causing the regression]: Process error; we're correcting this by adding it to the NSS Uplift script.

[User impact if declined]: Telemetry mismatches that currently exist in Release will remain until 54.

[Is this code covered by automated tests?]: Yes; this is just a metadata change though.

[Has the fix been verified in Nightly?]: Yes.

[Needs manual test from QE? If yes, steps to reproduce]: No.

[List of other uplifts needed for the feature/fix]: None.

[Is the change risky?]: No.

[Why is the change risky/not risky?]: This is a metadata change for the root telemetry module, and that module is tolerant to metadata containing a potentially different set of roots within it than the NSS Trust DB contains.

[String changes made/needed]: None.

Comment 7

[Gerry Chang [:gchang]]

Comment on attachment 8832684 [details]
Bug 1335466 - Regenerate the CA RootHashes.inc

Update CA telemetry hash table. Aurora53+.

Comment 8

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/releases/mozilla-aurora/rev/2cdc3dfa46c2

Comment 9

[Julien Cristau [:jcristau]]

Comment on attachment 8832684 [details]
Bug 1335466 - Regenerate the CA RootHashes.inc

RootHashes.inc update to fix telemetry mismatches, beta52+, should be in 52.0b4

Comment 10

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/releases/mozilla-beta/rev/6868ec86bd38