1748409 - Permanent security/manager/ssl/tests/unit/test_cert_expiration_canary.js | - verifying Test End-entity: should get error 0 - -8162 == 0 starting 2022-01-15 because some in-tree certificates expire on 2022-02-05

Status: RESOLVED FIXED

(Core :: Security: PSM, task, P1)

Description

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

+++ This bug was initially created as a clone of Bug #1686615 +++

See bug 1686615. Some certificates in the repository used by tests, e.g. bad_certs/default-ee.pem and bad_certs/test-ca.pem will expire on 2022-02-05 and the canary check for this will start to fail 3 weeks earlier on 2022-01-15.

Dana, can you drive the certificate updates before Jan 15?

Comment 1

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

On it (leaving needinfo for now).

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

Attachment: Bug 1748409 - regenerate expiring test certificates for 2022 r?jschanck

• the certificates were regenerated using ./mach generate-test-certs
• the build/pgo/certs/ changes were made using
  ./mach python build/pgo/genpgocert.py
• the zip files in security/manager/ssl/tests/unit/test_signed_apps/ were
  updated per the directions in the corresponding moz.build file
• security/manager/ssl/tests/unit/test_cert_override_read.js needed manual
  updating

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/3ef0a6b5bde6
regenerate expiring test certificates for 2022 r=jschanck

Comment 4

[Norisz Fay [:noriszfay]]

https://hg.mozilla.org/mozilla-central/rev/3ef0a6b5bde6

Comment 5

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-release/rev/69adaf7c5de9

Comment 6

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-esr91/rev/fc9428e0d441