1336254 - Please replace http://www.mozqa.com with http://no-ssl.mozqa.com where appropriate.

Status: RESOLVED FIXED

(Testing :: Firefox UI Tests, defect)

Description

[:Atoll]

While exploring mozqa questions on IRC, I found an instance where we are testing plain HTTP to mozqa, with the intent of testing the Firefox 'insecure' request path.

https://dxr.mozilla.org/mozilla-central/source/testing/firefox-ui/tests/functional/security/test_security_notification.py#24

I'd like to ask that we change this as follows:

        self.urls = [
            # Invalid cert page
            'https://ssl-expired.mozqa.com',
            # Secure page
            'https://ssl-ev.mozqa.com/',
            # Insecure page
-           'http://www.mozqa.com'
+           'http://no-ssl.mozqa.com'
        ]

This will require asking IT to set up http://no-ssl.mozqa.com to work as http://www.mozqa.com works today, which will be a very easy request for us.

If this is an acceptable request, please needinfo? me and I'll line up the ducks on the IT side to make this possible.

Comment 1

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Richard, that sounds perfect and I'm all with you on this. Lets do it. Thanks.

Comment 2

[:Atoll]

Filed bug 1336361 and once it's closed we'll be able to take further action upstream here. Thank you for your patience with all of the http:// stuff tonight!

Comment 3

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Richard, I assume we can now start to update the tests?

Comment 4

[:Atoll]

I believe so! If they pass, then yes :)

Comment 5

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Attachment: Bug 1336254 - Use http://no-ssl.mozqa.com to access test pages on mozqa.com without SSL.

All connections to mozqa.com which do not use SSL have to be done
to a unique subdomain. This was requested to lower the amount of
active HTTP endpoints.

Review commit: https://reviewboard.mozilla.org/r/143298/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/143298/

Comment 6

[Maja Frydrychowicz :impossibus (was :maja_zf) (needinfo me)]

Comment on attachment 8871827 [details]
Bug 1336254 - Use http://no-ssl.mozqa.com to access test pages on mozqa.com without SSL.

https://reviewboard.mozilla.org/r/143298/#review147340

Comment 7

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/331d128e1f58
Use http://no-ssl.mozqa.com to access test pages on mozqa.com without SSL. r=maja_zf

Comment 8

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

https://hg.mozilla.org/mozilla-central/rev/331d128e1f58

Comment 9

[Henrik Skupin [:whimboo][⌚️UTC+2]]

To be able to faster decommission the HTTP access for mozqa.com beside no-ssl.mozqa.com, I would like to see this test-only patch uplifted to all other branches. Thanks.

Comment 10

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/releases/mozilla-beta/rev/befb19ed674f

Comment 11

[Carsten Book [:Tomcat]]

 https://hg.mozilla.org/releases/mozilla-esr52/rev/135cba1f77acbbeb957648d9786809b2810daf98

Comment 12

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-esr45/rev/67be534d765f86d06f71a9c6b4694bfc13da0680

Comment 13

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Richard, everything should be done now. I would propose that you await the next esr releases, before stopping the delivering of content via HTTP from any vhost beside no-ssl.mozqa.com.

Comment 14

[:Atoll]

Great, thank you!