Closed Bug 1647505 Opened 3 months ago Closed 3 months ago

Perma ERROR: Can't find 'AddTrust External Root' in certNameToSKD

Categories

(Core :: Security: PSM, defect, P1)

defect

Tracking

()

RESOLVED FIXED
mozilla80
Tracking Status
firefox-esr68 --- unaffected
firefox-esr78 --- unaffected
firefox77 --- unaffected
firefox78 --- unaffected
firefox79 + fixed
firefox80 + fixed

People

(Reporter: cbrindusan, Assigned: keeler)

References

(Regression)

Details

(Whiteboard: [psm-assigned])

Attachments

(1 file)

#[markdown(off)]
Filed by: cbrindusan [at] mozilla.com

https://treeherder.mozilla.org/logviewer.html#?job_id=307075128&repo=mozilla-central

https://firefox-ci-tc.services.mozilla.com/tasks/T-PCggkCSZ-Lurl8K5jo5A/runs/1/logs/https%3A%2F%2Ffirefox-ci-tc.services.mozilla.com%2Fapi%2Fqueue%2Fv1%2Ftask%2FT-PCggkCSZ-Lurl8K5jo5A%2Fruns%2F1%2Fartifacts%2Fpublic%2Flogs%2Flive.log#L69719

INFO: Generating new HPKP preload list...
+ cd /home/worker/firefox
+ LD_LIBRARY_PATH=:.
+ ./xpcshell /home/worker/scripts/genHPKPStaticPins.js /home/worker/data/PreloadedHPKPins.json /home/worker/data/StaticHPKPins.h.out
JavaScript error: /home/worker/scripts/genHPKPStaticPins.js, line 476: Error: ERROR: Can't find 'AddTrust External Root' in certNameToSKD
+ echo 'INFO: Checking whether new HPKP preload list is valid...'
INFO: Checking whether new HPKP preload list is valid...
+ '[' '!' -s /home/worker/data/StaticHPKPins.h.out ']'
+ grep kPreloadPKPinsExpirationTime /home/worker/data/StaticHPKPins.h.out
+ echo '/home/worker/data/StaticHPKPins.h.out is missing an expiration time. Truncated?'
/home/worker/data/StaticHPKPins.h.out is missing an expiration time. Truncated?
+ exit 53
[taskcluster 2020-06-22 18:03:59.860Z] === Task Finished ===
[taskcluster 2020-06-22 18:03:59.932Z] Artifact "public/build/StaticHPKPins.h.diff" not found at "/home/worker/artifacts/StaticHPKPins.h.diff"
[taskcluster 2020-06-22 18:04:00.008Z] Artifact "public/build/remote-settings.diff" not found at "/home/worker/artifacts/remote-settings.diff"
[taskcluster 2020-06-22 18:04:00.271Z] Unsuccessful task run with exit code: 53 completed in 14503.586 seconds

Flags: needinfo?(jcristau)
Regressed by: 1646763
Summary: Intermittent ERROR: Can't find 'AddTrust External Root' in certNameToSKD → Perma ERROR: Can't find 'AddTrust External Root' in certNameToSKD
Component: Task Configuration → Security
Flags: needinfo?(jcristau) → needinfo?(jjones)
Product: Firefox Build System → Core

We need to update the Google roots list in security/manager/tools/PreloadedHPKPins.json.

Assignee: nobody → dkeeler
Severity: -- → S1
Component: Security → Security: PSM
Flags: needinfo?(jjones)
Priority: -- → P1
Whiteboard: [psm-assigned]
Attachment #9160240 - Attachment description: Bug 1647505 - update the list of Google roots in PreloadedHPKPins.json r?jcj!,kjacobs! → Bug 1647505 - update the list of Google roots in PreloadedHPKPins.json DONTBUILD NPOTB r?jcj!,kjacobs!
Pushed by dkeeler@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/b7322e66d779
update the list of Google roots in PreloadedHPKPins.json DONTBUILD NPOTB r=jcj,kjacobs
Status: NEW → RESOLVED
Closed: 3 months ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla80
You need to log in before you can comment on or make changes to this bug.