Closed Bug 1335466 Opened 5 years ago Closed 5 years ago

regenerate CA telemetry hash table (RootHashes.inc)

Categories

(Core :: Security: PSM, defect)

Product:
Core
Component:
Security: PSM
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla54
Tracking Flags:
Tracking Status
firefox52 --- fixed
firefox53 --- fixed
firefox54 --- fixed

People

(Reporter: pzb, Assigned: jcj)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

Bug 1335466 - Regenerate the CA RootHashes.inc
59 bytes, text/x-review-board-request
keeler
: review+
gchang
: approval-mozilla-aurora+
jcristau
: approval-mozilla-beta+
Details 
The root CA telemetry hash table hasn't been updated in a while. A number of changes have happened to the list of root CAs since June 2016.
Note that this is basically a repeat of bug 1266563.
Depends on: 1266563
Assignee: nobody → jjones
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true
Comment on attachment 8832684 [details]
Bug 1335466 - Regenerate the CA RootHashes.inc

https://reviewboard.mozilla.org/r/108880/#review110116

Great - thanks.
Attachment #8832684 - Flags: review?(dkeeler) → review+
Pushed by ryanvm@gmail.com:
https://hg.mozilla.org/integration/autoland/rev/c32b0727b37b
Regenerate the CA RootHashes.inc r=keeler
Keywords: checkin-needed
https://hg.mozilla.org/mozilla-central/rev/c32b0727b37b
Status: ASSIGNED → RESOLVED
Closed: 5 years ago
status-firefox54: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla54
Comment on attachment 8832684 [details]
Bug 1335466 - Regenerate the CA RootHashes.inc

Approval Request Comment
[Feature/Bug causing the regression]: Process error; we're correcting this by adding it to the NSS Uplift script.

[User impact if declined]: Telemetry mismatches that currently exist in Release will remain until 54.

[Is this code covered by automated tests?]: Yes; this is just a metadata change though.

[Has the fix been verified in Nightly?]: Yes.

[Needs manual test from QE? If yes, steps to reproduce]: No.

[List of other uplifts needed for the feature/fix]: None.

[Is the change risky?]: No.

[Why is the change risky/not risky?]: This is a metadata change for the root telemetry module, and that module is tolerant to metadata containing a potentially different set of roots within it than the NSS Trust DB contains.

[String changes made/needed]: None.
Attachment #8832684 - Flags: approval-mozilla-beta?
Attachment #8832684 - Flags: approval-mozilla-aurora?
Comment on attachment 8832684 [details]
Bug 1335466 - Regenerate the CA RootHashes.inc

Update CA telemetry hash table. Aurora53+.
Attachment #8832684 - Flags: approval-mozilla-aurora? → approval-mozilla-aurora+
Comment on attachment 8832684 [details]
Bug 1335466 - Regenerate the CA RootHashes.inc

RootHashes.inc update to fix telemetry mismatches, beta52+, should be in 52.0b4
Attachment #8832684 - Flags: approval-mozilla-beta? → approval-mozilla-beta+
Flags: qe-verify-
You need to log in before you can comment on or make changes to this bug.