Closed Bug 1532902 Opened 8 months ago Closed 8 months ago

Check https certificates during update verify

Categories

(Release Engineering :: Release Automation: Updates, enhancement)

enhancement
Not set

Tracking

(firefox67 fixed)

RESOLVED FIXED
Tracking Status
firefox67 --- fixed

People

(Reporter: nthomas, Assigned: nthomas)

References

Details

Attachments

(1 file)

Bug 798025 was recently closed and was hard because we ran update verify on each platform natively. These days we run the tests exclusively on linux, using Ubuntu 18.04, so the OS has a modern set of CAs which cover all the domains we use SSL on (archive.m.o, aus5.mozilla.org etc).

Here's a try staging release testing that we can remove the use of wget --no-check-certificate and curl -k. Windows was not tested due to the build failures but I don't think we actually need to test all the platforms, it's all or nothing when running on a single docker image.

Pushed by nthomas@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/332c017e85ec
Check https certificates during update verify, r=sfraser
Status: NEW → RESOLVED
Closed: 8 months ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.