1699294 - add a mach command to generate certificates and keys from certspec/keyspec files on-demand

Status: RESOLVED FIXED

(Core :: Security: PSM, task, P1)

Description

[Dana Keeler (she/her) [:keeler]]

In bug 1174288 and related bugs we created a framework for generating certificates (and later, keys) from specifications at build time. This turned out to take too long to run on each build, so this system was largely left disabled (see all "# Temporarily disabled. See bug 1256495." comments). What we really want is a way to run this step on-demand and then to check the results in to the tree. A mach command seems like a good way to do this.

Comment 1

[Dana Keeler (she/her) [:keeler]]

Attachment: Bug 1699294 - add 'mach generate-test-certs' command to generate test certificate and key artifacts r?glandium

In bug 1174288 and related bugs we created a framework for generating
test certificates (and later, keys) from specifications at build time. This
turned out to take too long to run on each build, so this system was largely
left disabled (see all "# Temporarily disabled. See bug 1256495." comments).
This patch introduces a mach command ("generate-from-specifications")
that can generate test certificate and key artifacts. The expectation is that
when a developer needs to add new such artifacts, they can use this new
command. Similarly, when the artifacts need to be updated (for example, because
they've expired), this command can regenerate them all at once.

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/3cfb51321646
add 'mach generate-test-certs' command to generate test certificate and key artifacts r=glandium

Comment 3

[Narcis Beleuzu [:NarcisB]]

https://hg.mozilla.org/mozilla-central/rev/3cfb51321646

Comment 4

[Julien Cristau [:jcristau] (back August 18)]

Attachment: Bug 1699294 - fix pylint warning in pycert.py. r?keeler

Anomalous backslash in string: '\w'. String constant might be missing an r prefix. (W1401)

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/0a30ca0e75ee
fix pylint warning in pycert.py. r=keeler

Comment 6

[Narcis Beleuzu [:NarcisB]]

https://hg.mozilla.org/mozilla-central/rev/0a30ca0e75ee